Fixed composer issue

* A library should not include a composer.lock. It is never used.
* An end user should never use `*` as required version. `dev-master` is better
  but `1.0.*` is better. So I added a branch-alias