Some well-intentioned library tagging in SERVER-25822 created a situation where our efforts to derive a component dependency graph from the library dependency graph ended up creating a cycle at the component layer. We would have caught it immediately if we enforced that the component dependency graph must form a DAG. We should add the necessary checking to ensure that this does not continue to happen.