fix broken composer.lock