What harm can arise from 2 deps including the exact same set of files with identical content? That would be dramatic if the files were not identical (akin to loading different versions of the same namespaces / classes), but can something bad happen on the CP if they are exact copies? At build time, I assume copies would simply overwrite themselves, without any real consequence?
The first one found is used. That, in itself, is not dangerous. The more common problem is when lib A includes lib B in its artifact. In that case it’s no longer possible for version selectors to do version selection on B if it’s included as a dep elsewhere. You then might get either version of the lib depending on classpath ordering, or mismatched sets of libs