composer update
is ...
- download https://packagist.org/p/*.json phase
- resolve dependencies phase
- download package.zip phase
In Asia(Japan, China, etc), far from packagist.org(French?), RTT is terrible. So it spends long time for "1. download meta.json phase". This is the benchmark for it. I think packagist.org should use CDN like CloudFlare.