introduce composer for third party dependencies