It looks like you are using a third party plugin (Inspection Lens?) that renders inspection messages to the editor area, is that right?
Basically, the main difference with package.json is that there is no inspection for package version updates in Composer, and the check is done differently.
If Gutter Icons are disabled, it is still should be possible to see available updates in an inlay hint.
Is it also missing in your case?