composer.lock composer.phar coverage/ vendor/