使用composer安装依赖，为什么安装了许多没有require的依赖？

[张泽蕴]

{
"name": "abc",
"description": "abc",
"keywords": ["abc"],
"homepage": "http://www.yiiframework.com/",
"type": "project",
"license": "abc",
"support": {
"issues": "https://github.com/yiisoft/yii2/issues?state=open",
"source": "https://github.com/yiisoft/yii2"
},
"minimum-stability": "dev",
"require": {
"php": ">=5.4.0",
"yiisoft/yii2": "~2.0.6",
"yiisoft/yii2-redis": "~2.0.0"
},
"require-dev": {
"yiisoft/yii2-debug": "~2.0.0",
"yiisoft/yii2-gii": "~2.0.0",
"yiisoft/yii2-faker": "~2.0.0",
"codeception/base": "^2.2.3",
"codeception/verify": "~0.3.1"
},
"config": {
"process-timeout": 1800
},
"extra": {
"asset-installer-paths": {
}
},
"scripts": {
}
}
composer.json如上图，里面并没有phpunit，symfony等依赖，然而composer install 安装完成后，vendor目录里面多了很多没有require或require-dev里面的依赖，如下图

请问下这是什么情况，composer菜鸟求教

[xuzuning]

composer 是垃圾、是强盗

[李睿_Lee]

估计是你安装的依赖又require了一些依赖。

[一生小白]

引用 1 楼 xuzuning 的回复:

composer 是垃圾、是强盗

为什么这么讲，感觉composer挺好的，可能我是小白，还请指教

[张泽蕴]

引用 1 楼 xuzuning 的回复:

composer 是垃圾、是强盗

为什么这么说 大神解释下呗

[sinat_41161127]

1. 删除composer.lock
2. 清composer 缓存： composer clear-cache
3. 更新lock composer update --lock
4. 重新 composer require