chore(npm): prevent deps from being checked in