remove lock and cleanup composer.json