gitignored composer lock