Excluded vendor directory and composer.lock