Could be read from vendor/composer/installed.json (if a composer installation). I could make a PR, if valuable for anybody.