try this:
composer require fof/pwned-passwords --update-with-dependencies
Nerd talk / how to dissect the composer log
- composer output isn't really sorted based on what it finds first
- it mentions as 4th entry that fof/pwned-passwords needs fof/components, but at least 0.1.1
- it mentions as last entry that fof/components was requested, but it is locked at 0.1.0; that it is locked means that it already exists in the composer.lock; this means that either your composer.json requires it, or that one of the entries has it as a dependencies
As a result it tries to push fof/components to 0.1.1, but can't because the lock file tells composer it should install 0.1.0. As composer require is supposed to install new things matching your current configuration/dependencies, it cannot update fof/components. However the flag --update-with-dependencies does allow to update dependencies of just the one package we're installing.
