Use packagist-only dependencies in composer.json