diff --git a/composer.json b/composer.json
index a2a23f4..78d6d53 100644
--- a/composer.json
+++ b/composer.json
@@ -15,5 +15,8 @@
 			"phpcbf",
 			"minus-x fix ."
 		]
+	},
+	"extra": {
+		"phan-taint-check-plugin": "1.4.0"
 	}
 }