/vendor composer.lock build coverage.xml