I extracted a rubygem (https://rubygems.org/downloads/awesome_print-1.8.0.gem) and I scanned it with scancode-toolkit and I got repeated Package and Dependency results. The package awesome_print was reported 20 times, and each dependency for awesome_print was reported 20 times.
In GemfileLockHandler.parse() it appears that we yield the package and dependencies too many times.