new composer.lock