The First intended use should be to allow the user to exclude selected dependencies from getting additional/removed/modified when "vendoring" dependencies. PRs, as an example most people would want to leave significant dependency updates to some human to overview first. A: It's i