You can have your composer.lock and not make others eat it too!

If you maintain a PHP package, there s a small file at the root of your repo that s quietly making life worse for everyone who installs it. That file is composer.lock . Your tests, CI configs, code style configs, and half a dozen other dev......