Under vendor/composer there is a file called installed.json. It seems to be a list of packages.json files, that you might get from Packagist, for each package in yo
packages.json