composer is the trojan horse enabler provided by lazy fuckers who get trapped into hype and like easy solutions to complex problems... now every library uses it, and we are stuck with this fucking piece of shit

php composer ?

> nodejs
> npm

composer, gem, pip, npm... they are called package managers.

And the trojan horse thing, yeah that’s how the whole security proposal came about which eventually led to npm audit and similar features in other package managers.