You can clone with
HTTPS or Subversion.
Mis-spelled config name should not be prioritized over correctly spelled one.
imo not a huge deal but if you want to submit the PR I'll merge it
Instead of letting the issue rot (OP opened this issue 6 months ago), I thought it was better to PR right away, so that we can close this issue.
It looks like bundledDependencies is always rewritten to bundleDependencies in the read-package-json module.
The double-d is actually the typo.