vendor lib composer.lock package-lock.json node_modules *.zip