UnifiedPush Server - Dependencies shipped inside WEB-INF/lib

Inside folder WEB-INF we are shipping some dependencies that are not enlisted inside the pom.xml file.
If all of these dependencies are needed, I would like to have them enlisted inside the pom.xml file, so that their version is nailed down and we do not incur in some maven transitive dependencies resolution that could lead to some unexpected versions.
These are the dependencies not enlisted in pom.xml:

com.googlecode.json-simple:json-simple (needed by com.ganyo:gcm-server)
com.google.zxing:core (needed by com.google.zxing:javase)
org.codehaus.jackson:jackson-core-asl (needed by org.apache.httpcomponents:httpclient)
org.codehaus.jackson:jackson-mapper-asl (needed by org.apache.httpcomponents:httpclient)
org.codehaus.jackson:jackson-xc (needed by org.apache.httpcomponents:httpclient)
org.apache.httpcomponents:httpclient (needed by org.keycloak:keycloak-jboss-adapter-core)
org.apache.httpcomponents:httpcore (needed by org.keycloak:keycloak-jboss-adapter-core)
commons-logging:commons-logging (needed by org.keycloak:keycloak-jboss-adapter-core)
commons-codec:commons-codec (needed by org.keycloak:keycloak-jboss-adapter-core)