Possible to lock Ocramius/PackageVersions dependency?

[MarkVaughn]

Ocramius/PackageVersions dropped php 7.2 support. PHP 7.2 is still actively maintained.
I use this package through phpstan for a ton of my repos. But this breaks at version 1.5 of Ocramius/PackageVersions
Ocramius/PackageVersions#105
Seems a bit radically to suddendly drop support for an active php version.

[Ocramius]

As explained in Ocramius/PackageVersions#105:

Hey there,

I dropped 7.2 because newer releases are meant for current stable (7.3).

Besides that, previous releases work just as fine 👍

PHPStan pins to jean85/pretty-package-versions:^1.0.3, which locks onto "ocramius/package-versions": "^1.2.0"

That means that your composer update should work as fine on PHP 7.1, PHP 7.2 or PHP 7.3.