webforge-common was the villain: update composer.json to have stable version from console (as in webforge and psc-cms)