add composer.lock