Sometimes composer can't download .json if it's working long time and in this time satis start update

[dubrsl]

Sometimes composer can't download .json, if it's working long time and in this time satis start update.
The issu looks like

13:11:13 composer -v require "oro/test-security:3.1.x-dev" --no-interaction --working-dir="/var/www/ovfs-mnt_0/application/commerce-crm-ee"
13:11:20 dev.json has been updated
13:11:20 Loading composer repositories with package information
13:11:20 Updating dependencies (including require-dev)
13:12:57 
13:12:57                                                                                                                                                                                               
13:12:57   [Composer\Downloader\TransportException]                                                                                                                                                    
13:12:57   The "https://packagist.orocrm.com/p/oro/commerce-enterprise%24d954b54f4dbd092344cd960b6f0fadc6c19aab9ee90e37220be46af0de4959f8.json" file could not be downloaded (HTTP/1.1 404 Not Found)  

In logs of satis I see that it delete and create required hash json file:

15358316176483037.log:Deleted /var/www/satis-control-panel/public//p/oro/commerce-enterprise$d954b54f4dbd092344cd960b6f0fadc6c19aab9ee90e37220be46af0de4959f8.json
15358326018031894.log:wrote packages to /var/www/satis-control-panel/public//p/oro/commerce-enterprise$d954b54f4dbd092344cd960b6f0fadc6c19aab9ee90e37220be46af0de4959f8.json
15359694015733666.log:Deleted /var/www/satis-control-panel/public//p/oro/commerce-enterprise$d954b54f4dbd092344cd960b6f0fadc6c19aab9ee90e37220be46af0de4959f8.json
15359730018541482.log:wrote packages to /var/www/satis-control-panel/public//p/oro/commerce-enterprise$d954b54f4dbd092344cd960b6f0fadc6c19aab9ee90e37220be46af0de4959f8.json

I understand the problem like this:

1. Composer read packages.json and hash from it.
2. Composer start downloading all artefacts.
3. During downloading, satis start update and remove hash which was in packages.json.
4. Composer can't download hash which was in packages.json.

IMHO it's bug. Is it possible don't remove, recently used json file?

[SvenRtbg]

That's what the pull request #472 already addressed, I think. Could you try if the mentioned config setting resolves your problem?

I have searched the documentation for this setting, but found nothing. :(

[dubrsl]

Yes, that's exactly what we need.
Close the issue.