The First supposed use is always to allow the consumer to exclude certain dependencies from remaining added/taken off/modified when "vendoring" dependencies. A use situation with the latter is When you are a Renovate bot admin and desire to supply a default token for npmjs.org with out eradicating some other .npmrc https://preechaconcretepile05936.blogvivi.com/33106414/top-build-a-house-secrets