!.gitignore composer.lock vendor