support devDependencies too