Just to expand a bit on what theomega was saying, the node_modules folder should generally be excluded from the repository. The idea is that anyone can grab a

Just to expand a bit on what theomega was saying, the node_modules folder should generally be excluded from the repository. The idea is that anyone can grab a copy and run npm install to get the devDependencies listed in package.json. Not only does that keep your repo cleaner but it also lets the package manager handle the management of packages. The last part is the important bit. Anyone running npm install after Coveralls 3.0.1 came out, for example, would get the updated version and all the correspondingly updated dependencies. As it stands, anyone who grabs a copy of your repository and uses the included node_modules won't get all the non-breaking incremental updates to all the dev dependencies, their dependencies, etc.