Reply to 1149795615880011778@dan_abramov I think security warnings should not take devDependencies into account.