warn if composer.lock is missing