composer.lock file should be committed.