Composer dependencies are generated on the server with:
composer install --no-dev --optimize-autoloader

This archive intentionally does not contain third-party vendor libraries. Do not expose vendor/ as a document root.
