shouldn't we put composer.lock in here?