the point of putting the deps in a separate collection is that they're not exposed via

product_graph.walk