Ignoring composer.lock