adds composer.lock files, per @weaverryan's request