Proposal:

• remove dist from dev-trunk
• append revision numbers to reference

  {
      "dev-trunk": {
-         "dist": {
-             "type": "zip",
-             "url": "https://downloads.wordpress.org/plugin/wordpress-seo.zip"
-         },
        "source": {
-             "reference": "trunk",
+             "reference": "trunk@3470087",
              "type": "svn",
              "url": "https://plugins.svn.wordpress.org/wordpress-seo/"
          },
          "type": "wordpress-plugin"
      }
  }

Goal: To ensure the same package versions are installed for the same composer.lock. Otherwise, deployments become unpredictable.

Reasons:

• https://downloads.wordpress.org/plugin/<slug>.zip point to latest revision of trunk. Therefore, always changing and not suitable for compose use.
• reference: trunk without @<revision-number> has the same issue.

Related:

• Plugins don't always tag their latest releases #15
• Split dev-trunk into ~dev.json for proper SVN revision locking #65