Tightened dependencies in composer.json