composer.lock file not needed