Dependencies not collected from NuGet

[pombredanne]

Description

No dep collected with a --package scancode of the .nuspec of this NuGet https://www.nuget.org/packages/Renci.SshNet/1.0.0 at https://www.nuget.org/api/v2/package/Renci.SshNet/1.0.0

<?xml version="1.0" encoding="utf-8"?>
<package xmlns="http://schemas.microsoft.com/packaging/2013/05/nuspec.xsd">
  <metadata>
    <id>Renci.SshNet</id>
    <version>1.0.0</version>
    <authors>Renci.SshNet</authors>
    <owners>Renci.SshNet</owners>
    <requireLicenseAcceptance>false</requireLicenseAcceptance>
    <description>A rebuild of ssh.net that has an interface for sftpclient</description>
    <dependencies>
      <group targetFramework=".NETStandard1.3">
        <dependency id="System.Diagnostics.TraceSource" version="4.0.0" exclude="Build,Analyzers" />
        <dependency id="System.Reflection.Extensions" version="4.0.1" exclude="Build,Analyzers" />
        <dependency id="System.Diagnostics.Tools" version="4.0.1" exclude="Build,Analyzers" />
        <dependency id="System.Diagnostics.Debug" version="4.0.11" exclude="Build,Analyzers" />
        <dependency id="System.Security.Cryptography.Algorithms" version="4.2.0" exclude="Build,Analyzers" />
        <dependency id="System.Threading.ThreadPool" version="4.0.10" exclude="Build,Analyzers" />
        <dependency id="System.Net.Sockets" version="4.1.0" exclude="Build,Analyzers" />
        <dependency id="System.Globalization" version="4.0.11" exclude="Build,Analyzers" />
        <dependency id="SshNet.Security.Cryptography" version="[1.2.0]" exclude="Build,Analyzers" />
        <dependency id="System.Xml.XmlDocument" version="4.0.1" exclude="Build,Analyzers" />
        <dependency id="System.IO.FileSystem" version="4.0.1" exclude="Build,Analyzers" />
        <dependency id="System.Threading.Thread" version="4.0.0" exclude="Build,Analyzers" />
        <dependency id="NETStandard.Library" version="1.6.0" exclude="Build,Analyzers" />
        <dependency id="System.IO.FileSystem.Primitives" version="4.0.1" exclude="Build,Analyzers" />
        <dependency id="System.Net.NameResolution" version="4.0.0" exclude="Build,Analyzers" />
        <dependency id="System.Xml.XPath.XmlDocument" version="4.0.1" exclude="Build,Analyzers" />
        <dependency id="System.Runtime.Extensions" version="4.1.0" exclude="Build,Analyzers" />
        <dependency id="System.Linq" version="4.1.0" exclude="Build,Analyzers" />
        <dependency id="System.Text.RegularExpressions" version="4.1.0" exclude="Build,Analyzers" />
        <dependency id="Microsoft.CSharp" version="4.0.1" exclude="Build,Analyzers" />
        <dependency id="System.Threading" version="4.0.11" exclude="Build,Analyzers" />
        <dependency id="System.IO" version="4.1.0" exclude="Build,Analyzers" />
        <dependency id="System.Threading.Timer" version="4.0.1" exclude="Build,Analyzers" />
      </group>
    </dependencies>
    <title>BloomCredit.SFTP</title>
    <projectUrl>https://github.com/Bloomcredit/SSH.NET</projectUrl>
    <tags>SFTP</tags>
  </metadata>
</package>

How To Reproduce

• Fetch https://www.nuget.org/api/v2/package/Renci.SshNet/1.0.0 and save as renci.sshnet.1.0.0.nupkg
• Extract with extractcode renci.sshnet.1.0.0.nupkg
• Scan with scancode -p --json-pp - renci.sshnet.1.0.0.nupkg-extract

System configuration

For bug reports, it really helps us to know:

• What OS are you running on? (Windows/MacOS/Linux)
• What version of scancode-toolkit was used to generate the scan file?
• What installation method was used to install/run scancode? (pip/source download/other)

[pombredanne]

#3121 is a related pending PR