Should the vendor folder be version controlled?

Question

git

Just started to deal with Git, the question arose which files to ignore and which to put under control. Installed Yii2 via composer, all its packages are contained in the vendor folder. The question is to put the vendor folder under version control or ignore this folder, because the composer.json file is already under control?

Answer 1

Можно "ставить под контроль" файл composer.lock - после pull'а на продакшене запускается "composer install" и версии пакетов всегда те же, что и у разработчика.

Answer 2

однозначно в игнор

Answer 3

В отдельный репозиторий зависимости. А так в .gitignore.
composer install для деплоя на прод? Не самое хорошее решение.