Depending composer.lock