It basically means that when you do `composer install` you'll get the versions installed based on that lock file.  `composer update` will update dependencies to the highest available that still matches the ranges.