fixed composer.json version constraints