composer lock ignored