Actually, prefer source is apparently the way to go: https://circleci.com/docs/composer-api-rate-limit