composer.lock and gitignore