This should be reverted. It does not make sense to deploy a composer project without a lock file (it means deploying unknown code)