Cpan doesn't trust "meta.yml"'s list of dependencies for a module. instead it expects "makefile.pl" run on the computer the package is being installed upon to generate its own list of dependencies (called "mymeta.yml" or "mymeta.json").

module::install::trustmetayml generates "mymeta.yml" by simply passing through the dependencies from "meta.yml".