I think it was going to be kept minimal, relying on composer.json (but maybe we should do a 'see composer.json' line.

My thinking is that if I were a new user of the CMF project, I would not care about the requirement for things like CoreBundle if they just get brought in by Composer, but I would care about the Symfony version because it's not always easy to upgrade/downgrade that. Also, if a bundle requires something like Apache Jackrabbit, that's probably worth a mention. ;)

Having said all that, I don't mind listing more...