vagrant@mediawiki-vagrant:/vagrant/mediawiki$ composer update
> ComposerHookHandler::onPreUpdate
Deprecation Notice: The Composer\Package\LinkConstraint\VersionConstraint class is deprecated, use Composer\Semver\Constraint\Constraint instead. in phar://composer.phar/bin/../src/../src/Composer/Package/LinkConstraint/VersionConstraint.php:17
Deprecation Notice: The Composer\Package\LinkConstraint\LinkConstraintInterface interface is deprecated, use Composer\Semver\Constraint\ConstraintInterface instead. in phar://composer.phar/bin/../src/../src/Composer/Package/LinkConstraint/LinkConstraintInterface.php:17
Loading composer repositories with package information
Updating dependencies (including require-dev)
Permission denied
http://packagist.org could not be fully loaded, package information was loaded from the local cache and may be out of date

                                                                                                
  [Composer\Repository\RepositorySecurityException]                                             
  The contents of http://packagist.org/p/oyejorge/less.php%2403ac6eb40ca164a7bd8632e529d4dbefe  
  f4195c8d8f46a02182d60aede82df03.json do not match its signature. This should indicate a man-  
  in-the-middle attack. Try running composer again and report this if you think it is a mistak  
  e.                                                                                            
                                                                                                

update [--prefer-source] [--prefer-dist] [--dry-run] [--dev] [--no-dev] [--lock] [--no-plugins] [--no-custom-installers] [--no-autoloader] [--no-scripts] [--no-progress] [--with-dependencies] [-v|vv|vvv|--verbose] [-o|--optimize-autoloader] [-a|--classmap-authoritative] [--ignore-platform-reqs] [--prefer-stable] [--prefer-lowest] [-i|--interactive] [--] [<packages>]...