@danielcsgomes composer can install global packages, that's not in `composer.json`. It's only running this command once and gush is installed globally on your server.

However, I think gush should also be available as phar.