composer.lock should not be in git