Plugin System Architecture

Hey folks!

I'm currently building some kind of CMS where I need plugin functionality. It is important that end users can simply install, update and uninstall plugins via their admin control panel. That means that I don't want those users to use the CLI at all. I thought I could use a custom composer installer and then call composer via a PHP Script. This should also work on shared hosting. Is this a good consideration? Also important to note is that I want the plugin developers to be able to require composer packages and even require other plugins (also composer packages). Those dependencies should be handled automatically.

Thanks in advance.