[TASK] adding replace package link to disable cms-composer-installer
[BUILD] explicitely using --no-plugins during `composer install`