Dot files generally have to be granted an exemption from the automated tests. If the composer files were agreed at time of initial review and approval, the exemption would already have been granted. If you add them at a later update, then tests will fail and you will need to request the exemption.
For vendor files, we generally like them to be slimmed down to just the distribution, so things like massive directories of /tests and /examples need to be removed. Other vendor file complaints such as missing exec or die, system functions etc, we usually grant an exemption at the time of review/approval.
Request an exemption by posting to the review for a package under review, or for already approved packages end a PM for such to myself or Nour.