composer.lock vendor/composer/installed.json *~