if a module is configured to be bundled in vendor.js, but is imported using a non-default import path (e.g. to force cjs import/require), the module/package itself is still getting included in the npm package,json dependencies block