validating composer.json