Dependencies are installed when not needed.

[bdrewery]

For all of the _DEPENDS lists the first column defines when the dependency is needed. It may be a binary in the path, a package, or a library. Portupgrade is ignoring this field and always installing the dependency when the ports framework may have actually skipped installing it. This is easily seen with base utility dependencies such as in security/keychain. It has a dependency on ssh-agent:${PORTSDIR}/security/openssh-portable that is only needed to be installed if ssh-agent is not installed.

[bdrewery]

Same issue in portmaster freebsd/portmaster#44