add composer.lock for scrutinizer