package json overrides devdependencies