provide a composer.lock for Scrutinizer