Maybe this is a bit nit-picky. 
In the README.md for both OMP and OJS the example command for composer is “update”, maybe the default one should be “install”?
The README states you should be either running install or update, but the provided example is a “update” command. You end up with different dependency versions and an updated lock file - for users (or even new developers) not quite what you want to do.