is this a devDependency or an actual real dependency? i think xhr2 should go into `"dependencies":`