fixes devDependencies; blame to the lame `^` range of node.js