use composer to manage dependencies