Use the correct syntax in composer for looking down sha1s