Safely using Composer on Centmin

Server Type: openvz
CentOS Version: 7.6
Centmin Mod: 123.09beta01.b126

I am working on converting a project that uses composer to Centminmod.

---

The problem is that composer advises you not to use it as a root user!
With good reason!

Any suggestions on how to set up a php app with composer as a non-root in Centmin? I have always just used the default setup...

Thanks
-Jscott

 

Sorry, I was not clear in what I am asking.

I do have composer installed globally, and it is working fine.

I question comes up when I want to use <code>composer update</code> or <code>composer upgrade</code> to update dependencies for my php application.

Currently they are ignoring the warning and running as root.

I want to remove that exploit path.

Currently, the domains public directory is owned by root and is a member of the nginx group

Should I create a user for the applications updates and add that user to the nginx group? This is kind of pushing my linux knowledge...

-Thanks
jscott