private-composer-installer

Composer install helper outsourcing sensitive keys from the package URL into environment variables. Maintained by ffraenz on GitHub, where it has earned 232 stars from the community.

It's actively developed around acf, composer, composer-plugin, and is a solid reference for anyone building with these tools.