ignore composer.lock

scribu · scribu · commit 5451e7724f1a · 2013-06-23T14:45:47.000+03:00
Facts:

1. When WP-CLI isn't installed as the root package, composer.lock is
ignored.

2. The wp-cli.org installer doesn't install WP-CLI as the root package,
but as a dependency.

1. + 2. =&gt; Having composer.lock under version control gives a false
sense of security. Instead, we should take more care with how we define
dependencies in composer.json
diff --git a/.gitignore b/.gitignore
@@ -1,3 +1,4 @@
+composer.lock
 composer.phar
 /vendor
 /phpunit.xml
