Unfortunately the Mix Dependencies are not that simple. The files do not contain all the info and are written in Elixir.
I had to implement multiple strategies, one being an actual Mix Runtime that loads the project config:
https://github.com/erlef/mix-dependency-submission/tree/main/lib/mix_dependency_submission/fetcher
