lock file should be in the bootstrap project