Requirements should be checked
The requirements should be checked in the code; what will happen if PHP version is lower that 5.6, does the application fail gracefully? But if OpenSSL is missing or not properly working?
They are verified in Composer. You won't be able to install the package if PHP version is lower than 5.4 or if the OpenSSL and JSON extensions aren't installed.
As @pxgamer says, the Composer is a package installer and it will automatically check composer.json to make sure dependency definitions will be correct.
I think we don't have to add some codes to check this because it seems that we don't support installing this package without Composer.