also the composer.lock