devDependencies are fixed