node package.json dependencies vs devdependencies