Added composer.lock to gitignore.
Added phpunit to require-dev in composer.json.

This should be alright for library usage. If not, we can roll
back.