include composer lock in repo