now JarArtifact is responsible for discovering its own dependencies