Composer with prefer source, avoiding github api rate limit