The library has support to decide the depths you want to load (meaning to also get the dependencies of a dependency).
In the CLI we do not set this for simplicity reasons. the user would need to be asked another question.
but it can easily be changed here:
https://github.com/getAlby/pkgzap/blob/main/cli/bin/index.js#L112
And yeah, with the lightning prism idea the package developer already can pass on the payment and split up received payments. So I think ideally this would be the way to go?