*.json composer.lock !composer.json vendor build