stop tracking vendor dir and composer.lock file