`sinon` is a test technology so should only be added to `devDependencies`.