retrieve vendor from composer package, for filtering