adding composer.lock to project root