peer dependencies can be satisfied by grandparent

this reflects the behavior of `npm install`