Find juicy composer.json and composer.lock files
INURL PARAMETER + FILETYPE - SITE :
inurl:composer.json filetype:json -site:github.com
FOR composer.lock :
inurl:composer.lock filetype:lock -site:github.com
Result :
Sensitive files
About :
The root package is the package defined by the composer.json at the root of your project. It is the main composer.json that defines your project requirements.
(© Getcomposer)