bug: composer.json