The initial intended use is usually to allow the consumer to exclude sure dependencies from getting extra/removed/modified when "vendoring" dependencies. A use situation for your latter is If you're a Renovate bot admin and would like to offer a default token for npmjs.org without having removing any other .npmrc configurations https://samuelt245mlj6.vigilwiki.com/user