require-dev doesn't include PHPUnit

[ruafozy]

The require-dev property in composer.json has no
entry for PHPUnit. I thought I should point this out,
in case it's an oversight. (To me, it seems advisable to
lock PHPUnit to a version or range of versions.)