Yup that sounds correct. It should read the dev requires of the root package but it seems that's taken care of at https://github.com/pl-github/composer/blob/eb524302b41d01906adeb8388048cb48d275204f/src/Composer/Installer.php#L822 so I guess this should indeed be removed. Can you confirm @naderman?