warn on missing lock for now and check for that before installing
composer.json for detect