because the sandbox composer file specifies `"minimum-stability": "dev",` 1.0.* will pick up the dev version that is aliased to 1.0-dev. otherwise we would need `1.0.*@dev`. the thing is that this will remain working when we release 1.0.0, 1.0.1 and so on, but never pick up 1.1.0 (the increase in the minor version means small BC breaks. while we increase the last number for non-BC break improvements and bugfixes).
this is somewhat relevant for the sandbox because people might use it as template for their project.