Get rid of `composer.lock`. move it to `.gitignore`