Drupal developer Harshal Pradhan warns that directly modifying the 'composer.lock' file in Drupal 10 can create serious stability, security, and deployment issues. While there are rare exceptions, developers are advised to rely on Composer commands to manage dependencies.
...more