Warn user if a downgrade is about to happen

Doing `composer update` when the installed package is not in sync
with the lock file can downgrade dev package (see bug #3439).