The impact to Composer users directly is limited as the composer.json file is typically under their own control