do not ignore composer.lock