title: Possible to write versions in composer.json similar to npm update --save
body: <p>Handed a project that has a composer.json that has all package versions listed as "*" and has no <code>composer.lock</code> file</p>
  
  <p>In the original project, running <code>composer show</code>, tells me all versions of everything installed. Excellent.</p>
  
  <p>Running the project on a different machine, running <code>composer install</code> gets all the latest packages, which breaks the project because major updates mess with everything.</p>
  
  <p>I'd love to know if it's possible to trade out all those <code>"*"</code>'s with caret version numbers utilising <code>composer show --save-dev</code> or something similar. Perhaps only possible by running a script or installing something?</p>