dependencies in composer.json