Inspect `composer.lock` for patches

Inspecting composer.lock for a project can reveal the presence of multiple cweagans/composer-patches patches entries.

Here's a jq command to look at this:

cat composer.lock | jq -r '.packages[].extra.patches | select( . != null )'

That will output a series of patches arrays, from either the 'current' project or any dependency which introduces them. (Note that dependency patches goes away in cweagans/composer-patches v2.

The above command could be improved to report on the package which introduced those patches, it doesn't yet show this.