tiny-cloud-aws (main) depends on nvme-cli (community)
In the course of writing a dependency solver for APK on Alpine Linux v3.17, I noticed that the package tiny-cloud-aws (in main) depends on nvme-cli (in community). My assumption is that community can depend on main but main cannot depend on community, so this breaks the soundness of the dependency graph in main.
Is my assumption correct, and if so, how would this be fixed?