Lock file should be included 

for having consistency in dependencies, reproducibility of errors and guarantees of releases. See https://github.com/composer/composer/blob/master/doc/02-libraries.md#lock-file