ignoring composer.lock as in any library