Transitive dependencies matching the upgraded direct dependency dropped from lockfile #250
Description
Examples:
parse-community/parse-server#6478
In this PR, a direct dependency on ws was updated from 7.2.1 to 7.2.2. The dependency parse should also rely on ws@7.2.1, but that dependency was removed from the lockfile.
parse-community/parse-server#6504
In this PR, a direct dependency on commander was updated from 4.1.1 to 5.0.0. The direct dependency was updated correctly, but two other dependencies had commander@^4.0.1 removed from their dependency lists (@babel/cli and lint-staged both depended on it).
In this second case, there wasn't even an exact match on the type field, but it does look like they had been resolving to the same version.