defend against invalid composer.phars