Tools update

New tools:

• box - Fast, zero config application bundler with PHARs - the latest maintained version of box. The legacy version of box is now available as box-legacy (previously box). #86
• composer-normalize - Composer plugin to normalize composer.json files - replaces localheinz/composer-normalize #181
• composer-unused - Show unused packages by scanning your code #171 (thanks @benjy8001)
• phpat - Easy to use architecture testing tool #182 (thanks @carlosas)

Updates:

• phpmd (2.6.0 -> 2.8.1) #177
• pdepend (2.5.2 -> 2.6.1) #178
• psalm (3.8.1. -> 3.8.2) #183