fix enforcer rule failures for transitive dependencies