It's not a problem that Docker Compose can be used and a configuration is provided. What's an indicator of a dependency problem is when it's the only way to deploy the software. If, instead, they could say "all required dependencies ship in Debian at a sufficient version to meet our requirements" then that would be ideal (Debian isn't a hard requirement for me, but I use it as an example since it sets a bar similar to the one I want software I deploy to meet). Or even just "nearly all dependencies except this one" would be much better.