Add "shipping" keyword to composer.json and be smarter with dependency versioning