do not enforce dev-master in composer.json

By the way, how about a new tag? 1.0.0 is pretty old.