define a composer.lock