Closed gsomoza closed 8 years ago
For your library you may commit the composer.lock file if you want to. This can help your team to always test against the same dependency versions. However, this lock file will not have any effect on other projects that depend on it. It only has an effect on the main project. [emphasis mine] from here
So, the .lock file is only used when hacking on sphpdox itself, not if you're requiring it into another project. (In that latter case, the .lock file is completely ignored.)
You're right, I must have had another problem with dependencies then. Apologies for the distraction :)
The
composer.lock
file should ideally not be distributed in library packages like this one, because it limits composer's package choices on end-user projects.