I don't even see `jaxb-api` as a transitive dependency:
[INFO] --------------------< org.eclipse.milo:stack-core >---------------------
[INFO] Building stack-core 0.3.5-SNAPSHOT [4/18]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ stack-core ---
[INFO] org.eclipse.milo:stack-core:jar:0.3.5-SNAPSHOT
[INFO] +- org.bouncycastle:bcprov-jdk15on:jar:1.61:compile
[INFO] +- org.bouncycastle:bcpkix-jdk15on:jar:1.61:compile
[INFO] +- com.google.guava:guava:jar:26.0-jre:compile
[INFO] +- io.netty:netty-codec:jar:4.1.34.Final:compile
[INFO] | +- io.netty:netty-common:jar:4.1.34.Final:compile
[INFO] | +- io.netty:netty-buffer:jar:4.1.34.Final:compile
[INFO] | \- io.netty:netty-transport:jar:4.1.34.Final:compile
[INFO] | \- io.netty:netty-resolver:jar:4.1.34.Final:compile
[INFO] +- io.netty:netty-handler:jar:4.1.34.Final:compile
[INFO] +- org.slf4j:slf4j-api:jar:1.7.25:compile
[INFO] +- com.sun.activation:jakarta.activation:jar:1.2.1:compile
[INFO] +- org.glassfish.jaxb:jaxb-runtime:jar:2.3.2:compile
[INFO] | +- jakarta.xml.bind:jakarta.xml.bind-api:jar:2.3.2:compile
[INFO] | +- org.glassfish.jaxb:txw2:jar:2.3.2:compile
[INFO] | +- com.sun.istack:istack-commons-runtime:jar:3.0.8:compile
[INFO] | +- org.jvnet.staxex:stax-ex:jar:1.8.1:compile
[INFO] | +- com.sun.xml.fastinfoset:FastInfoset:jar:1.2.16:compile
[INFO] | \- jakarta.activation:jakarta.activation-api:jar:1.2.1:compile
[INFO] +- com.google.code.findbugs:jsr305:jar:3.0.2:provided
[INFO] +- org.testng:testng:jar:6.9.10:test
[INFO] | +- com.beust:jcommander:jar:1.48:test
[INFO] | \- org.beanshell:bsh:jar:2.0b4:test
[INFO] \- org.slf4j:slf4j-simple:jar:1.7.25:test