Composer.lock shouldn't be in the repository