Thanks @jungle, I ran this now on composer 1.9.0 and the hash does look diffe...