try Scrutinizer with composer.lock