move dev deps to package.json