Some transitive dependencies do not add as dependencies

I originally created this in DTrack as I misread the generated SBOM and guessed it was the cause. However, through discussion, it was shown to me that a valid dependency tree and NuGet Restore scenario can create correct Components data (it pulls the right packages) but does not properly show the full Dependency Graph. This is because some packages do not properly set up as Dependencies in the dependencies section for an unknown reason (but not all, some do).

The attached SBOM you can see not all dependency data below is present - for instance the OpenXML.Framework package depending on System.Packaging.IO. The result of this is an incomplete DTrack dependency graph:

[bom.xml](https://github.com/user-attachments/files/24895697/bom.xml)

Unfortunately I don't really understand why it does it with some but not all dependencies. We successfully proved if you hand add the dependencies in the expected form, the Dependency Graph works as expected.