It’s probably more than you’d need for just two dependencies, but Apache’s Ivy does more or less exactly that (although admittedly without a nice web UI)
Another solution for simple builds could be to use git submodules to include your libraries, that way for any commit of the top level you can see exactly what commit of the lower levels you’re using
the stay was part of the Supreme Court of CO decision, it’s automatically stayed until Jan 04th or SCOTUS rules on it, whichever comes first. If SCOTUS doesn’t rule on it before then he’s off