composer locked