sandbox private composer.json