When using composer require to add a new package to an existing project, how does composer reconcile versions of a package that is a dependency of both the existing
composer require