The Shavlik data does not contain dependency info which BSA can use for patch deployment.
As for this specific case to ensure the required patch is first installed could use a patch analysis job just for KB4132216 or a compliance job.
There isa pre-requisite put in place for KB4132216 to be installed prior to being able to find KB4284880 missing and applicable in the
One change was made in the latest XML release will be that the update KB4132216 will be changed from Non-security to Security.
the XML release will be that the update KB4132216 will be changed from Non-security to Security. The catalog needs to be updated for this change to take effect.