Issue with dependency plugin

Hi,

I've been working with the dependency plugin and I'm seeing something that I think is wrong, but I'd like someone to confirm it before I file a bug report.

I created a simple pom file which has one dependency for Apache Shiro:

<dependencies>

<dependency>
<groupId>org.apache.shiro</groupId>
<artifactId>shiro-core</artifactId>
<version>1.2.3</version>
</dependency>

</dependencies>

And when I run dependency:tree I see:

com.symantec.ssg.osrb:dependencytest:jar:1.0
\- org.apache.shiro:shiro-core:jar:1.2.3:compile
+- org.slf4j:slf4j-api:jar:1.6.4:compile
\- commons-beanutils:commons-beanutils:jar:1.8.3:compile

However, when I set my dependencies to just Apache Commons BeanUtils:

<dependencies>

<dependency>
<groupId>commons-beanutils</groupId>
<artifactId>commons-beanutils</artifactId>
<version>1.8.3</version>
</dependency>

</dependencies>

And then run dependency:tree I get:

com.symantec.ssg.osrb:dependencytest:jar:1.0
\- commons-beanutils:commons-beanutils:jar:1.8.3:compile
\- commons-logging:commons-logging:jar:1.1.1:compile

So, why don't I see commons-logging under beanutils for Apache Shiro???