#1: Only consider exported packages of dependencies