composer.lock should not be ignored