The most obvious option that Composer offers is to run the install step with --no-dev
option to leave out any stuff that is require-dev
, i.e. a copy of PHPUnit and other things dedicated for development.
The only other option is to use --prefer-dist
to download a ZIP file with the software version instead of cloning it from the source repository.
Apart from that Composer does not influence the packaging of downloaded and included software on it's own - it just downloads the ZIP file (which might be a reduced copy of the original repository), or clones it (which is the biggest variant of all).
If you already installed packages without any of my suggested command line options, it might be a good idea to delete the vendors directory completely and run another composer update --prefer-dist
in order to get rid of any cloned repositories and replace them with a downloaded version.
Note that requiring development versions like dev-master
or allowing to use dev-stable packages via minimum-stability:dev
is not really recommended. It usually leads to cloning the repository.