ignore vendor
add composer.lock