Transitive dependencies of dependencies end up in bundle

So while the dependencies array is used to externalize things, this doesn't extend to their further dependencies.

No files, tests, or entry points are named. Start by tracing how the dependencies array externalizes packages, then reproduce a bundle with a dependency that has its own dependency; done means transitive dependencies are handled consistently with the declared dependencies.

Written by the indexing model from the issue text.