package.json: use "dev" instead of "devDependencies"