Run composer with '--no-plugins --no-scripts' options

Just to be on the safe side when running the script as root...
Reference: https://getcomposer.org/doc/faqs/how-to-install-untrusted-packages-safely.md