Fix: Ignore composer.lock and vendor directory

Adding 

- `composer.lock` 
- `vendor` 

to the global `.gitignore` is not an option. Is it?