title: What should my composer.json file look like in production environment?
body: <p>I have a Symfony 2.1 project, with additional bundles installed via composer. I want to deploy it to my production server, but I'm wondering if I need to change any things in the <code>composer.json</code> file. Here is my current file content:</p>
  
  <pre><code>{
      "name": "symfony/framework-standard-edition",
      "description": "The \"Symfony Standard Edition\" distribution",
      "autoload": {
          "psr-0": { "": "src/" }
      },
      "require": {
          "php": "&gt;=5.3.3",
          "symfony/symfony": "2.1.1",
          "doctrine/orm": "&gt;=2.2.3,&lt;2.4-dev",
          "doctrine/doctrine-bundle": "1.0.*",
          "twig/extensions": "1.0.*",
          "symfony/assetic-bundle": "2.1.*",
          "symfony/swiftmailer-bundle": "2.1.*",
          "symfony/monolog-bundle": "2.1.*",
          "sensio/distribution-bundle": "2.1.*",
          "sensio/framework-extra-bundle": "2.1.*",
          "sensio/generator-bundle": "2.1.*",
          "jms/security-extra-bundle": "1.2.*",
          "jms/di-extra-bundle": "1.1.*",
  
          "friendsofsymfony/user-bundle": "*",
          "knplabs/knp-paginator-bundle": "dev-master",
          "ornicar/gravatar-bundle": "dev-master",
          "liip/url-auto-converter-bundle": "dev-master"
      },
      "scripts": {
          "post-install-cmd": [
              "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::buildBootstrap",
              "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::clearCache",
              "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::installAssets",
              "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::installRequirementsFile"
          ],
          "post-update-cmd": [
              "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::buildBootstrap",
              "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::clearCache",
              "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::installAssets",
              "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::installRequirementsFile"
          ]
      },
      "config": {
          "bin-dir": "bin"
      },
      "minimum-stability": "dev",
      "extra": {
          "symfony-app-dir": "app",
          "symfony-web-dir": "web"
      }
  }
  </code></pre>
  
  <p>Should I change the <code>minimum-stability</code> setting?</p>
  
  <p>Should I fix every requirement to a single version, without wildcard, or "dev-master"?</p>
  
  <p>Am I supposed to search on <a href="http://packagist.org/" rel="nofollow">http://packagist.org/</a> the last stable version of each dependency?</p>