composer.lock is now versioned, updated readme.