Hi,

For Magento 2:

If you could add a box where a user can add / remove / update composer modules in the admin panel.

There should be some validation on the text box to check if the composer module requires authentication or not.

If there is authentication required or a 3rd party server needs to be used, there should be a tickbox which enables additional input fields for credentials.

UX Wise:

Add Button -> Add composer require -> Run Composer Require -> Run Composer Update.

Delete Button -> Add composer remove XXX -> Run Composer Update.

Update Button -> Run Composer Update.

Upgrade Magento Button -> Runs bin/magento setup:upgrade which is required to install any new extensions onto Magento 2.

Deploy Static Content Button -> Redeploys all locale static content for Magento 2 store.

Reporting:

If any errors pop-up, composer will automatically rollback to it's previous version and a message pops up stating that the request to update/add/delete has failed.

If there is a success, then an output of composer is displayed to the user.

Please can you notify your customers via email about current vulnerabilities/wide-spread attacks with Wordpress and other software packages asap.
Today I was made aware of any issue with one of my customer's sites which was not posted on all vulnerabilities sites. On contacting cloudways I was told by a Cloudways representative that there was a current widespread attack on Wordpress sites with a suspect certain version of a plugin installed, that was impacting on a large percentage of wordpress installations.

How come you don't notify your admin clients when this first becomes apparent so that:
1. It reduces your service/support contact points;
2. Your clients can assist their clients;
3. We are able to address the issue as soon as possible to prevent follow-on effects.

I hope that this happens in the future.

Thanks