add composer.json in protected