Extension updater lists extensions that have not been installed directly by the user

We need to decide if this is a bug or a feature. In some cases it can be dangerous to upgrade the dependencies of an installed extension without actually upgrading the extension. For instance, I installed:

XWiki Platform - Git 4.5
  (JGit - Core 1.3.0.201202151440-r)
    (JSch 0.1.44-1)

that has the specified transitive dependencies. The extension updater suggests the following upgrades:

XWiki Platform - Git 4.5.3
  (JGit - Core 1.3.0.201202151440-r)
JGit - Core 2.3.1.201302201838-r
JSch 0.1.49

although:

• I didn't install directly JGit Core nor JSch, they are just transitive dependencies,
• and, as you can see, XWiki Platform Git 4.5.3 depends on an older version of JGit Core than the one proposed for upgrade.