All packages are stored - not only allowed_types

[GuySartorelli]

There is an allowed_types config array on UpdatePackageInfoTask which seems like it should be limiting which types of packages are stored as Package objects in the database. Instead, it only limits which types are displayed in the SiteSummary report

It seems to me that if this is intended to be a configuration that only affects the report, it would be set on the report. The PHPDoc also suggests it should limit which types are processed by the task:

The "types" of composer libraries that will be processed. Anything without these types will be ignored.