good question. This package.json is actually the result of compilation. When you really look at the source code of the control, this metadata is not found in the package.json source code, but pay attention to the last lines of package.json in the source code:
this article to learn more.