Kyrne blocking a dependency at one exact version in composer.json usually isn't a very good idea as it might block composer updates later on. Any reason not to use ^5.0.1 ? Also if it doesn't need to become a root dependency in composer.json, maybe just suggest updateing that package, or update the extension with all dependencies with composer update <your ext> --with--all-dependencies? Also, also, actually actually, wouldn't Composer already install the compatible version based on the platform requirements?
