{
  composerMeta,
  src,
  vendor,
  stdenvNoCC,
}: let
  inherit (composerMeta) version name;
in
  stdenvNoCC.mkDerivation {
    inherit src version;
    pname = "${name}-check-vendor-hash";

    postPatch = ''
      ln -s ${vendor}/vendor vendor
    '';

    buildPhase = ''
      runHook preBuild

      diff -q ${vendor}/composer.lock composer.lock || (echo "vendorHash is out of date" && exit 1)

      runHook postBuild
    '';

    installPhase = ''
      touch $out
    '';
  }