What did you get for output when using verbose output? Any composer authentication involved for private packages?
Also see Deploy failed - Composer and https://discourse.roots.io/t/deploy-failed-because-of-composer-dependencies/27810/7 which may offer clues .