Expose to end users components that contain other components

In some cases open source components actually contain _within them_ other open source components (e.g. openssl has [blowfish in it](https://github.com/openssl/openssl/blob/8b1549a153a62e9878327d05aa3b6622b416ec10/crypto/bf/blowfish.h)).

In tandem with the ability to curate this information and add it to the data in the [UI we expose](https://github.com/clearlydefined/website/issues/334), there may be some service changes needed to accommodate exposing this? We should explore and design the right scenario for our users here.