We're using a satis repo to host zip file dependencies. Our composer.json file's repository array points to the satis repo and disables packagist. But when we run composer update, composer.lock still lists the original source under "source" (The one listed in satis.json under repositories). The satis is listed under "dist". Which is a problem because a call to composer install will download the source.
How can I have calls to composer install only download the satis dist zip file and nothing else?
We were having the exact same problem you describe. We managed to get our to work by removing "skip-dev": true (we had that in there while troubleshooting) and running composer update with --prefer-dist option.
Not sure exactly how all of this is put together, brand new to satis and still learning composer. Hope this helps someone in the same boat.