Enhancement: confirm a .phar file in the repo does not trigger composer self-update