Extracts dependencies from composer.json files, and keeps the associated composer.lock file updated too.