If a Bower dependency is downloaded via http, it is saved to .bower.json within that folder. If the link is later updated to git in the bower-locker.bower.json file, bower-locker will instead use the original value saved in .bower.json. Thus continuing to use the http repo link.