Should we continue to require `"phpunit/phpunit": "*"`?