package -> vcs in composer.json