moved all the packagist dependencies to the appropriate core or plugins ...

...composer.json,

i can not move the remaining dependencies, since custom package definitions are not yet resolved recursively

the candycms/core dependency needs testing, shoulb be >= 3.0 but that version does not yet exist, also i do not know if dev-dev or master-dev will be matched by this