ignore composer.lock and vendor dir