package.json: Don't list unexpected in both dependencies and devDependencies.