The initial meant use should be to allow the user to exclude particular dependencies from currently being included/removed/modified when "vendoring" dependencies. A use case for that latter is Should you be a Renovate bot admin and want to supply a default token for npmjs.org with out eradicating some other .npmrc https://www.preechaconcretepile.com/