The First supposed use is always to enable the person to exclude sure dependencies from currently being added/taken out/modified when "vendoring" dependencies. A use situation for that latter is If you're a Renovate bot admin and wish to provide a default token for npmjs.org with no eradicating any other .npmrc https://preechaconcretepile17158.azzablog.com/32650170/the-smart-trick-of-pile-driving-service-that-nobody-is-discussing