update composer.json, vendor lib