Shouldn't phpunit be pulled in implicitly by `codeception` instead of being explicitly required? As far as I can see it just got added with a more or less "random" PR which synced dependencies with the advanced template. Introducing commit / PR: - https://github.com/yiisoft/yii2-app-basic/commit/9d3b84517ad93b228311886e0737b213616bb716 - https://github.com/yiisoft/yii2-app-basic/pull/262