[MDEP-638] unpack-dependencies excludeGroupIds still includes transitive dependencies of excluded

**[mike duigou](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=bondolo)** opened **[MDEP-638](https://issues.apache.org/jira/browse/MDEP-638?redirect=false)** and commented

If I exclude group IDs with excludeGroupIds I would expect that the transitive dependencies only reachable through the excluded dependencies would not be included

---
No further details from [MDEP-638](https://issues.apache.org/jira/browse/MDEP-638?redirect=false)

Start by locating the unpack-dependencies handling for excludeGroupIds and reproduce the issue with a dependency graph containing excluded dependencies and their transitives. Trace how exclusions affect traversal; done means dependencies reachable only through excluded group IDs are absent from the unpacked output, with regression coverage for that case.

Written by the indexing model from the issue text.