refected hint about composer dependency versioning in config file