packagist compliance