I think there's no way to uninstall a package. Remove the dependency, update and then remove manually the vendor/package folder. No, put your needed version or update other packages one at a time. Maybe you could fork the repo and then let composer point to your static one instead of the original...

@spescina, thanks for the reply!

Regarding the package Y question, wouldn't I achieve what I want by simply removing the dependency from the composer.json but without deleting manually from vendor/package folder?

I do agree that fork might be the best option but I don't until deal with Git and forking as I don' know enough about it.

spescina said:

I think there's no way to uninstall a package. Remove the dependency, update and then remove manually the vendor/package folder. No, put your needed version or update other packages one at a time. Maybe you could fork the repo and then let composer point to your static one instead of the original...

hmm.. when I removed the dependency from composer.json then ran update command and it deleted the related vendor/package folders and files... :(