Do not track vendor/ directory. Useless. Use composer.lock as our reference when deploying.
Silence [32m./composer.json is valid[39m and make it happy with our composer.json. Project is GPL-3.0.