Wait - in 1.X depmap is only a listing of dependencies Pants knows about from local information - so it stops at all your direct 3rdparty dependencies. If any of your direct 3rdparty dependencies have transitive requirements on jackson - voila.