maven puts them on the dependent. but i think that's primarily because in maven you don't have 1st class 3rdparty entries