escaping composer.json