General project change:
- cleaned up vendor/ as it is a "build" (means being locally recreated)
directory and therefor should *NOT* be committed.
- updated composer.lock
- that is what would be updated now if vendor/ would be ignored, instead a lot
files has been changed in vendor/
- people running `composer install` regulary will get (with the old way) a dirty
working copy (version-controlled files being modified) and then cannot update