Does Composer prioritise private packages' requirements?

Question

I have a project where composer is used to install Nette Framework and one private package hosted in private composer repository.

Project's composer.json:

...
"require": {
    "php": ">= 5.3.7",
    "nette/nette": "2.1.*",
    "myrepo/private-package": "*"
},
"minimum-stability": "dev",
"repositories": [
    {
        "type": "composer",
        "url": "http://myrepo.org"
    }
]
...

Private package's composer.json:

...
"require": {
         "php": ">= 5.3.7",
         "nette/nette": "2.2.*"
},
...

As you can see the project requires Nette 2.1.*. The Private package, however, requires Nette on version 2.2.*.

If I run composer install, Composer installs 2.2.* version of Nette. That doesn't comply the project's composer.json (which requires 2.1.*).

I understand both requirments can't be fulfilled. But why composer doesn't print out an error then? Do private repositories have some kind of priority?

Answer 1

This was a bug and is now fixed.