correct composer.json version constraint