title: Is the "--no-scripts" option enough to account for the security concerns about running composer as root?
body: <p>I would like to make <code>.sh</code> file for automatic deploy web pages from github to production. I need to run composer install in it but as I run it, it throws me a warning:</p>
  <blockquote>
  <p>&quot;Do not run composer install as root super user!&quot;</p>
  </blockquote>
  <p>I found out this is because of security reasons. But I need to run also other commands which needs to e.g. delete some files and directories.</p>
  <p>The solution I found to fix this is:</p>
  <pre><code>composer install --no-scripts --no-interaction
  </code></pre>
  <p>The question is: Is it enough? Is <code>--no-script</code> the solution or not? What is the best practice regarding running composer as root?</p>