Installing Composer to Install Magento Question

[USMC7312]

So, I am deploying Magento 2.1.6 on Apache 2.4 for the first time.  In reading the instalation manual, it appears that the strategy is to install composer via ssh directly on the server.  This allows you to deploy Magento using composer directly?  Specifically you would install this in the global bin directory?

Can someone confirm that I am reading this correctly?

[Manuelson]

Hello,

The vendor/ folder contains all the dependencies that exist in Magento. The installed dependencies are in the file composer.lock where there is a definition of the installed versions. Is a good practice you should commit the file composer.json and composer.lock to deploy in production the command 'composer install' when is required. In this way the dependencies will remain intact.