Commit the composer.lock file.

This way, I'm sure other users will have the same dependencies and will
have a working repository.