Do include composer.lock in your VCS!