explicitly search for non-weak dep

dep.references ought to never be empty, but if it is we should consider
that to not be a dependency!