The depends test installs a package and imports all its modules to identify missing dependencies. However, it begins by installing a number of common SDK dependencies. It therefore won't fail when the package under test doesn't declare a dependency on one or more of these. For example, azure-keyvault-secrets was missing a dependency on azure-common which wasn't discovered until manual verification of a release build.

This happens because depends depends on deps:

which installs azure-sdk-tools:

which installs a few management packages:

and all their transitive dependencies.