Due to possibility of using Piwik as dependency (i.e. for automating build and deploy process) it would be great to keep those 2 files synchronised at all times, and in specific it involves using strict versioning in composer.json to avoid uncontrolled version switches which could break deployment procedure.