composer.lock checkin