Often not an option:

E.g: npm/yarn will complain loudly if you add unexpected lines in package.json IIRC.