It's not a problem that Docker Compose can be used and a configuration is provided. What's an indicator of a dependency problem is when it's the only way to deploy the software. If, instead, they could say "all required dependencies ship in Debian at a sufficient version to meet our requirements" then that would be ideal (Debian isn't a hard requirement for me, but I use it as an example since it sets a bar similar to the one I want software I deploy to meet). Or even just "nearly all dependencies except this one" would be much better.

100% -- firs time I have seen providing a docker compose file is a sign of weakness.

Yeah... I'm not sure that I've ever seen a complex app with multiple, separate service/database requirements (redis, pg, etc) packaged in a Linux distro repository... but I could be wrong.