Based on that, I don't think we can trust the order that ivy returns child deps has any meaning. Making things more difficult to figure out ordering is that jetty-server also has a direct dep on javax.servlet-api.