Yes, I did these through the APM, so it must be putting in the extra requires.
I'll clean up the requires, and unless anyone objects I'll replace the more obviously bogus data (like the package owner being at Arsdigita) with generic ownership by the project; I've seen that done in a few packages. Then when we have maintainers for all the packages, someone can go through and update them again.