default behavior is to install dependencies from vendor
do not ignore composer.lock in fixtures