ignore vendor and composer.lock