diff --git a/composer.json b/composer.json
index 48155eab..7518fefe 100644
--- a/composer.json
+++ b/composer.json
@@ -40,5 +40,8 @@
 			"phpcs -p -s",
 			"minus-x check ."
 		]
+	},
+	"extra": {
+		"phan-taint-check-plugin": "1.2.0"
 	}
 }