add composer.lock in the repository