0.4.0

• Packages names have been lowercased and invalid characters will be removed to prevent errors when Composer 2.0 is released (#90). This may require updates to composer.json if your project requires packages with uppercase characters.
• Refactored authentication servers to prevent conflicts with plugins that call determine_current_user earlier than expected (#94). This changes the server interface and will require code updates if you're using custom authentication server.
• Introduced a default logger implementation to surface issues in debug.log when debug mode is enabled. By default, only messages with a warning level or higher will be logged (#86).
• Updated the sanitization rules for custom vendor names to align more closely with Composer's rules.
• Introduced a testing suite and tests.
• Fixed the documented method for disabling authentication (#93). Props @rickard-berg
• Sorted releases just before building a package to ensure they're always in the expected order.
• Fixed the permalink for packages.json when rewrites aren't enabled.