Lets take that example:
<composite:attribute name="vipa" type="com.test.doesntexist.MyController" required="true" />
the type will NOT be validated in MyFaces.
Therfore if you switch e.g. to Mojarra (our applications most work on both impls), ClassNotFound will be thrown.
MyFaces should log a warning in that case.