Yeah, you can just upload a composer.lock file and that's it, we will track all of the open source you use and even the software that comes under first level. I.e we track the complete graph.

Feel free to contact us.