Don't commit composer.lock