so thats the thing… npm has weird rules for deps vs devdeps