removing eval in all but one place (Composer._export, and heavily filtering its use there)