Follow composer convention to require a package with its version constraint

E.g. foo/bar:1.0.0 or foo/bar=1.0.0 or "foo/bar 1.0.0"