Ignore composer.lock and vendor/