3 # Installs Composer (latest version, to avoid relying on old ones bundled with the OS)
4 # @todo allow users to lock down to Composer v1 if needed
6 EXPECTED_SIGNATURE="$(wget -q -O - https://composer.github.io/installer.sig)"
7 php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
8 ACTUAL_SIGNATURE="$(php -r "echo hash_file('sha384', 'composer-setup.php');")"
10 if [ "$EXPECTED_SIGNATURE" != "$ACTUAL_SIGNATURE" ]
12 >&2 echo 'ERROR: Invalid installer signature'
17 php composer-setup.php --install-dir=/usr/local/bin