Track composer.lock

Signed-off-by: Jan Van der Taelen <janvandertaelen@gmail.com>