, composer.json composer install. , , composer.lock .
composer require thenew/package ~1.0
: composer install -. composer.lock composer install, , . composer update , .
: vendor. : , , , composer require . () - composer install , composer.json composer.lock .