Install a Composer package without editing composer.json

# require is new: it writes the constraint into composer.json and installs
# in one step, so the file and the vendor tree cannot drift apart.
php composer.phar require monolog/monolog:1.0.*

# on a build without it, add the line by hand and update that package only
php composer.phar update monolog/monolog