Useful answers: I need to put a library (e.g. CKEditor for Webform) in the `libraries` directory, and not in `vendor`. Is this even possible with Composer? What is the difference between `^` and `~` in version requirements, and should I use one over the other? When I run `composer update` a lot of weird things happen and everything is updated, even if I don't want it to be updated. Is there a way I can just update one module at a time? For security reasons, I need to verify that the code I'm running in production wasn't hacked or modified. How can I do this if I'm using Composer to manage my dependencies? My team constantly battles with `composer.lock` file merge conflicts. How can we avoid this painful experience? Link https://www.jeffgeerling.com/blog/2017/composer-and-drupal-are-still-strange-be…