- Resolve peer dependencies by preferring non‑aliased packages when both aliased and non‑aliased exist
- Authentication token lookup now ignores URL ports when reading .npmrc
- Local directory dependency versions are omitted from the lockfile to avoid unnecessary Git conflicts
