Composer Plugin for improving the security of composer-based Drupal projects by moving all PHP files out of docroot - View it on GitHub