Thanks for your work on this library. Due to https://github.com/composer/composer/security/advisories/GHSA-frqg-7g38-6gcf the minimum version for the 1.x version of composer should be 1.10.23. This means the entry in composer.json should be: "composer/composer": "^1.10.23"