fixed path to composer.lock