transitive dependencies put into node_modules