add composer.lock for scrutinizer analysis