Given what I wrote above, it isn't too surprising that:
<dependency path="MyModule//myScript.js" />
also results in a null pointer exception. However, such a construction is usually considered a valid file path, and thus the bug here is not just limited to URLs.

-Will