but in the meantime, square's work on

managed_dependencies

, and foursquare's work on

pom-resolver

are both relevant (linked from there)