composer.lock excluded in .gitignore