set version dependencies, add composer lock file