Line 281 of the UrlModuleSourceProvider currently reads:
return lastModified == urlConnection.getLastModified();
It should read
return lastModified != urlConnection.getLastModified();

This error prevents the expiry date of a cached, file-based commons-js module from being updated despite the absence of filesystem modifications. Thus the ModuleSourceProviderBase will not recognize that the module entity does not require revalidation (if block on line 37 of ModuleSourceProviderBase), resulting in filesystem resolution of the commons-js entity with every script reference.