composer.json: requires tokenizer and suggests mbstring & fileinfo