docs: clarify ignore/files rules

docs/lib/content/configuring-npm/package-json.md

@@ -291,25 +291,40 @@ Certain files are always included, regardless of settings:
 
 `README` & `LICENSE` can have any case and extension.
 
-Conversely, some files are always ignored:
+Some files are always ignored by default:
 
+* `*.orig`
+* `.*.swp`
+* `.DS_Store`
+* `._*`
 * `.git`
-* `CVS`
-* `.svn`
+* `.npmrc`
 * `.hg`
 * `.lock-wscript`
+* `.npmrc`
+* `.svn`
 * `.wafpickle-N`
-* `.*.swp`
-* `.DS_Store`
-* `._*`
+* `CVS`
+* `config.gypi`
+* `node_modules`
 * `npm-debug.log`
+* `package-lock.json` (use
+  [`npm-shrinkwrap.json`](/configuring-npm/npm-shrinkwrap-json)
+  if you wish it to be published)
+* `pnpm-lock.yaml`
+* `yarn.lock`
+
+Most of these ignored files can be included specifically if included in
+the `files` globs.  Exceptions to this are:
+
+* `.git`
 * `.npmrc`
 * `node_modules`
-* `config.gypi`
-* `*.orig`
-* `package-lock.json` (use
-  [`npm-shrinkwrap.json`](/configuring-npm/npm-shrinkwrap-json) if you wish
-  it to be published)
+* `package-lock.json`
+* `pnpm-lock.yaml`
+* `yarn.lock`
+
+These can not be included.
 
 ### main