added experimental flag to force users to enable this and by doing so understand that these may not be as production ready as the Java analyzer (see issue #498)

dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/ComposerLockAnalyzer.java

@@ -41,6 +41,7 @@ import java.security.MessageDigest;
  *
  * @author colezlaw
  */
+@Experimental
 public class ComposerLockAnalyzer extends AbstractFileTypeAnalyzer {
 
     /**

dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/PythonDistributionAnalyzer.java

@@ -50,6 +50,7 @@ import org.owasp.dependencycheck.utils.UrlStringUtils;
  *
  * @author Dale Visser
  */
+@Experimental
 public class PythonDistributionAnalyzer extends AbstractFileTypeAnalyzer {
 
     /**

dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/PythonPackageAnalyzer.java

@@ -44,6 +44,7 @@ import java.util.regex.Pattern;
  *
  * @author Dale Visser
  */
+@Experimental
 public class PythonPackageAnalyzer extends AbstractFileTypeAnalyzer {
 
     /**

dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/RubyBundleAuditAnalyzer.java

@@ -47,6 +47,7 @@ import org.owasp.dependencycheck.data.nvdcve.DatabaseException;
  *
  * @author Dale Visser
  */
+@Experimental
 public class RubyBundleAuditAnalyzer extends AbstractFileTypeAnalyzer {
 
     private static final Logger LOGGER = LoggerFactory.getLogger(RubyBundleAuditAnalyzer.class);

dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/RubyBundlerAnalyzer.java

@@ -45,6 +45,7 @@ import org.owasp.dependencycheck.dependency.Dependency;
  *
  * @author Bianca Jiang (biancajiang@gmail.com)
  */
+@Experimental
 public class RubyBundlerAnalyzer extends RubyGemspecAnalyzer {
 
     /**

dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/RubyGemspecAnalyzer.java

@@ -44,6 +44,7 @@ import org.slf4j.LoggerFactory;
  *
  * @author Dale Visser
  */
+@Experimental
 public class RubyGemspecAnalyzer extends AbstractFileTypeAnalyzer {
 
     /**