vendor ignored, and composer update