Lists dependencies not on package.json; Should they be?