composer.lock: added so that sites on shared hosting will have something to start with