The First supposed use is always to allow the person to exclude specified dependencies from remaining added/removed/modified when "vendoring" dependencies. A use case with the latter is If you're a Renovate bot admin and would like to offer a default token for npmjs.org with no getting rid of every other https://preechaconcretepile47036.jts-blog.com/31610746/the-basic-principles-of-renovate