On 5.3, Zeta components are flagged to use @dev. Commit hash locks should be used as there are no tags yet.
EZP-23189 Composer install/update fails on zetacomponents/base requirements