Issue with dependency plugin

[David Dillard]

Hi,

I've been working with the dependency plugin and I'm seeing something that I 
think is wrong, but I'd like someone to confirm it before I file a bug report.

I created a simple pom file which has one dependency for Apache Shiro:

  <dependencies>

    <dependency>
      <groupId>org.apache.shiro</groupId>
      <artifactId>shiro-core</artifactId>
      <version>1.2.3</version>
    </dependency>

  </dependencies>

And when I run dependency:tree I see:

com.symantec.ssg.osrb:dependencytest:jar:1.0
\- org.apache.shiro:shiro-core:jar:1.2.3:compile
   +- org.slf4j:slf4j-api:jar:1.6.4:compile
   \- commons-beanutils:commons-beanutils:jar:1.8.3:compile


However, when I set my dependencies to just Apache Commons BeanUtils:

<dependencies>

    <dependency>
      <groupId>commons-beanutils</groupId>
      <artifactId>commons-beanutils</artifactId>
      <version>1.8.3</version>
    </dependency>

  </dependencies>

And then run dependency:tree I get:

com.symantec.ssg.osrb:dependencytest:jar:1.0
\- commons-beanutils:commons-beanutils:jar:1.8.3:compile
   \- commons-logging:commons-logging:jar:1.1.1:compile


So, why don't I see commons-logging under beanutils for Apache Shiro???