validate composer.json