Dependency tree generated for org.apache.pulsar:bouncy-castle-bc:4.0.1 is missing dependencies

[shs96c]

Steps to reproduce:

coursier fetch "org.apache.pulsar:bouncy-castle-bc:4.0.1" --artifact-type "jar,json,aar,bundle,eclipse-plugin,exe,orbit,test-jar,hk2-jar,maven-plugin,scala-jar,dylib,so,dll,pom,src,doc" --verbose --no-default --json-output-file "dep-tree.json" --checksum "SHA-1,MD5" --repository 'https://repo1.maven.org/maven2'

Examine the generated dep-tree.json file and notice that "org.bouncycastle:bcprov-ext-jdk18on:1.78.1" is listed as a direct dependency, but there's no matching entry in the dependencies array:

{
  "conflict_resolution": {},
  "dependencies": [
    {
      "coord": "org.apache.pulsar:bouncy-castle-bc:4.0.1",
      "file": "/Users/shs/Library/Caches/Coursier/v1/https/repo1.maven.org/maven2/org/apache/pulsar/bouncy-castle-bc/4.0.1/bouncy-castle-bc-4.0.1.jar",
      "directDependencies": [
        "org.bouncycastle:bcpkix-jdk18on:1.78.1",
        "org.bouncycastle:bcprov-ext-jdk18on:1.78.1"
      ],
      "dependencies": [
        "org.bouncycastle:bcpkix-jdk18on:1.78.1",
        "org.bouncycastle:bcprov-ext-jdk18on:1.78.1",
        "org.bouncycastle:bcprov-jdk18on:1.78.1",
        "org.bouncycastle:bcprov-jdk18on:jar:1.78.1",
        "org.bouncycastle:bcutil-jdk18on:jar:1.78.1"
      ]
    },
    {
      "coord": "org.bouncycastle:bcpkix-jdk18on:1.78.1",
      "file": "/Users/shs/Library/Caches/Coursier/v1/https/repo1.maven.org/maven2/org/bouncycastle/bcpkix-jdk18on/1.78.1/bcpkix-jdk18on-1.78.1.jar",
      "directDependencies": [
        "org.bouncycastle:bcprov-jdk18on:jar:1.78.1",
        "org.bouncycastle:bcutil-jdk18on:jar:1.78.1"
      ],
      "dependencies": [
        "org.bouncycastle:bcprov-jdk18on:jar:1.78.1",
        "org.bouncycastle:bcutil-jdk18on:jar:1.78.1"
      ]
    },
    {
      "coord": "org.bouncycastle:bcprov-jdk18on:1.78.1",
      "file": "/Users/shs/Library/Caches/Coursier/v1/https/repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.78.1/bcprov-jdk18on-1.78.1.jar",
      "directDependencies": [],
      "dependencies": []
    },
    {
      "coord": "org.bouncycastle:bcprov-jdk18on:jar:1.78.1",
      "file": "/Users/shs/Library/Caches/Coursier/v1/https/repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk18on/1.78.1/bcprov-jdk18on-1.78.1.jar",
      "directDependencies": [],
      "dependencies": []
    },
    {
      "coord": "org.bouncycastle:bcutil-jdk18on:jar:1.78.1",
      "file": "/Users/shs/Library/Caches/Coursier/v1/https/repo1.maven.org/maven2/org/bouncycastle/bcutil-jdk18on/1.78.1/bcutil-jdk18on-1.78.1.jar",
      "directDependencies": [
        "org.bouncycastle:bcprov-jdk18on:jar:1.78.1"
      ],
      "dependencies": [
        "org.bouncycastle:bcprov-jdk18on:jar:1.78.1"
      ]
    }
  ],
  "version": "0.1.0"
}

This is the underlying issue behind bazel-contrib/rules_jvm_external#1313