Since we need to always be aligned with ORM for those dependencies (otherwise we’re in trouble in integrations), we should avoid dependency management. See the approach we took for Jandex, for example.