feat: Add MongoIdempotencyStoreOptions for MongoDB configuration

feat: Implement BsonJsonConverter for converting BsonDocument and BsonArray to JSON

fix: Update project file to include MongoDB.Bson package

test: Add GraphOverlayExporterTests to validate NDJSON export functionality

refactor: Refactor Program.cs in Attestation Tool for improved argument parsing and error handling

docs: Update README for stella-forensic-verify with usage instructions and exit codes

feat: Enhance HmacVerifier with clock skew and not-after checks

feat: Add MerkleRootVerifier and ChainOfCustodyVerifier for additional verification methods

fix: Update DenoRuntimeShim to correctly handle file paths

feat: Introduce ComposerAutoloadData and related parsing in ComposerLockReader

test: Add tests for Deno runtime execution and verification

test: Enhance PHP package tests to include autoload data verification

test: Add unit tests for HmacVerifier and verification logic

src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Php/Internal/PhpPackage.cs

@@ -38,6 +38,30 @@ internal sealed class PhpPackage
             yield return new KeyValuePair<string, string?>("composer.source.ref", _package.SourceReference);
         }
 
+        if (!_package.Autoload.IsEmpty)
+        {
+            if (_package.Autoload.Psr4.Count > 0)
+            {
+                yield return new KeyValuePair<string, string?>(
+                    "composer.autoload.psr4",
+                    string.Join(';', _package.Autoload.Psr4));
+            }
+
+            if (_package.Autoload.Classmap.Count > 0)
+            {
+                yield return new KeyValuePair<string, string?>(
+                    "composer.autoload.classmap",
+                    string.Join(';', _package.Autoload.Classmap));
+            }
+
+            if (_package.Autoload.Files.Count > 0)
+            {
+                yield return new KeyValuePair<string, string?>(
+                    "composer.autoload.files",
+                    string.Join(';', _package.Autoload.Files));
+            }
+        }
+
         if (!string.IsNullOrWhiteSpace(_package.DistSha256))
         {
             yield return new KeyValuePair<string, string?>("composer.dist.sha256", _package.DistSha256);