composer lock