Mastering Composer - Tips and Tricks

I think composer.lock should always be commited. Today’s techniques for deployment rerun composer install on each deploy which on a large composer.json (without composer.lock) file can result into a lot of time waiting.