Here is a django application that exposes an API that takes in a composer.lock file, checks it against the SensioLabs web server, and logs it into Django's MongoDB so that you can do CRUD against it, as you prioritize and address your vulnerabilities.