Lock composer deps. Fix incorrect scoped method location