aglynn/secureself
Here is a Django application that exposes an API that takes in a composer.lock file, checks it against the SensioLabs web service for checking PHP package vulnerabilities, and logs it into Django's MongoDB so that you can do CRUD against it, as you prioritize and address your vulnerabilities.