`coveralls` package (see #23 ) is referenced in `yarn.lock` but not in any `package.json` file as a dependency.