Composer is meant to manage your PHP dependencies, not JS.
Also, it only supports one vendor folder.
You might follow the way Symfony bundles use:
- install everything in vendor
- link (or copy) public assets to a public directory as part of your deployment process
In my opinion it's safer than installing something in a public folder (as long as you copy/link public part of a library only).
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…