Generate a dep tree given a composer.lock file
npm install @snyk/composer-lockfile-parser*

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part of your CI (Build) system.