While generating SBOMs for the PHP front-end, I realized that the composer.json project properties object is very terse and only specifies a couple of plugins and an autoload clause.

At the bare minimum, we should also include the name, version and license identifiers to, as described by the schema.

The name and license properties probably won't ever change, but someone has to decide on what these should be, while the version string should be whatever version control says it is.