Watch out if composer update keeps replacing a dependency