onedisposable It is far more complex than that. Building a complex PHP application like ours using Composer is the obvious and logical way forward. It becomes complicated in our case because we do not only have application dependencies, but also need to take into account dependencies for extensions. As Toby wrote above, we could write our own dependency resolver and conflict detection, but Composer already does this very well.
I'd love to find a way to use Composer for extensions without requiring SSH access on shared hosts, but we haven't found that yet. :-/
If you have serious opinions or arguments (in a little more detail than "this is bonkers") then we're very happy to hear and discuss them in this thread. ๐