add composer.json, write composer.lock