In other words PEX isn't at fault here, since the problem is like an order of magnitude harder than writing a pom resolver (which I've done)