Bundle ClassPath causes path warnings when using -Xlint:path

[mal]

± lein uberjar
Compiling 2 source files to /home/mal/code/storm-app/target/classes
warning: [path] bad path element "/home/mal/.m2/repository/storm/jgrapht/0.8.3/lib/jgraph.jar": no such file or directory
1 warning
Created /home/mal/code/storm-app/target/test-v0.0.1.jar
Created /home/mal/code/storm-app/target/test-v0.0.1-standalone.jar

± ll /home/mal/.m2/repository/storm/jgrapht/0.8.3/
total 256
-rw-rw-r-- 1 mal mal 245255 Feb 13 20:55 jgrapht-0.8.3.jar
-rw-rw-r-- 1 mal mal     40 Feb 13 20:55 jgrapht-0.8.3.jar.sha1
-rw-rw-r-- 1 mal mal   1247 Feb 13 20:55 jgrapht-0.8.3.pom
-rw-rw-r-- 1 mal mal     40 Feb 13 20:55 jgrapht-0.8.3.pom.sha1
-rw-rw-r-- 1 mal mal    180 Feb 13 20:55 _maven.repositories

I'm guessing this problem is a result of the way jar files are stored in .m2 perhaps. I also realise that this example is using storm/jgrapht/0.8.3 however the same issue is suffered by:

Retrieving org/jgrapht/jgrapht-core/0.9.0/jgrapht-core-0.9.0.pom from central

[mal]

Possibly already addressed by #68?

[jsichi]

Hmmm...no, I think this is a different bug. In the manifest for jgrapht-core-0.9.1-SNAPSHOT.jar (latest), I see this:

Bundle-ClassPath: .,lib/xmlunit1.0.jar,lib/jgraph.jar,lib/TGGraphLayout.jar,lib/junit.jar

This seems wrong; only jgrapht-ext (not jgrapht-core) should depend on jgraph.jar, and only jgrapht-touchgraph should depend on TGGraphLayout.jar. Anyone know what generates these?