It's unclear to me why the latter would be correct given how zinc and resolvers would respectively report used deps and provided deps