Clarify that composer.json is being read and not downloaded, refs #2096