update composer.json - still just guessing