corrected composer.lock