pom.xml: list all direct dependencies explicitly