/yii/wiki/671
locking-your-yii-2-project-package-versions-with-composer-lock