misplaced composer.lock