Investigated this, we should use installed.json since it's more likely to be correct and has a different meaning than composer.lock. Tagged as good first task.

can i do this?

In T106247#1751339, @rosalieper wrote:

can i do this?

You can work on any bug without the above like comment ( unless the task is assigned to someone else, and requires consensus ) , following https://www.mediawiki.org/wiki/Gerrit/Tutorial#How_to_submit_a_patch

Change 248667 had a related patch set uploaded (by Rosalieper):
Absolute file paths changed

https://gerrit.wikimedia.org/r/248667

In T106247#1751339, @rosalieper wrote:

can i do this?

Please see https://www.mediawiki.org/wiki/How_to_become_a_MediaWiki_hacker#Communicate_that_you_work_on_a_bug

Thanks @Aklapper for the wonderful advice. I will endeavor to do that anytime i want to work on a bug.

Change 248667 abandoned by Rosalieper:
Absolute file paths changed

Reason:
Problems faced and new patch set needs to be released to suite the needs of the patch.

https://gerrit.wikimedia.org/r/248667

Change 248803 had a related patch set uploaded (by Rosalieper):
Changed paths to package dependency file

https://gerrit.wikimedia.org/r/248803

Change 248803 merged by jenkins-bot:
Changed paths to package dependency file

https://gerrit.wikimedia.org/r/248803