composer.lock and uploads dirs