dev dependencies are fixed