The session component does not provide the psr/http-message interfaces. It does not even provide an implementation of these interfaces (and neither of the PSR container interfaces).
Lying about provided packages will cause issues as composer might not install psr/http-message when other packages need it, by thing that viserio/session already fills the need. And Composer 2 is more likely to be affected than Composer 1 as it respects provide more than Composer 1.
The session component does not provide the psr/http-message interfaces. It does not even provide an implementation of these interfaces (and neither of the PSR container interfaces). Lying about provided packages will cause issues as composer might not install
psr/http-messagewhen other packages need it, by thing thatviserio/sessionalready fills the need. And Composer 2 is more likely to be affected than Composer 1 as it respectsprovidemore than Composer 1.