That's a valid point in general, but I don't see how it applies to dev dependencies (which shouldn't even be installed in production).