It is always better to be explicit. If you let `composer.lock` every `composer.lock` in the repository will be ignored. We do no want that. Of course, you will tell me that  in this project, there are no other `composer.lock` but this is good practice.

 I agree this should be in another PR. but IMHO, This can stay as it is. What do you think ?