modify composer.json to use stable version of dependencies.
ignore composer vendor file.