We may want to only report on production dependencies Probably worth having an input option for this