composer.phar vendor composer.lock bin