diff --git a/.npmignore b/.npmignore
index b10c4d1..ebde8dc 100644
--- a/.npmignore
+++ b/.npmignore
@@ -59,3 +59,4 @@ codecov.yml
 
 http/bower_components
 http/node_modules
+test
\ No newline at end of file
diff --git a/CHANGELOG.md b/CHANGELOG.md
index cb5430b..3cd7c7f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,8 @@
 - dep(punycode): specify as punycode.js
   - which always avoid name conflict with stale node.js built-in
 - doc(README): update ci badge URLs (#82)
+- dep(mocha & eslint): remove from devDeps (install with npx)
+- pkg: add ./test to .npmignore
 
 
 ### [1.2.0] - 2023-12-12
diff --git a/package.json b/package.json
index 6002e1c..4d25a24 100644
--- a/package.json
+++ b/package.json
@@ -7,9 +7,10 @@
     "test": "test"
   },
   "scripts": {
-    "test": "npx mocha",
-    "lint": "npx eslint *.js lib test",
-    "lintfix": "npx eslint --fix *.js lib test"
+    "test": "npx mocha@^10",
+    "lint": "npx eslint@^8 *.js lib test",
+    "lintfix": "npx eslint@^8 --fix *.js lib test",
+    "versions": "npx dependency-version-checker check"
   },
   "repository": {
     "type": "git",
@@ -27,11 +28,9 @@
   },
   "homepage": "https://github.com/haraka/haraka-tld#readme",
   "dependencies": {
-    "punycode": "^2.3.1"
+    "punycode.js": "^2.3.1"
   },
   "devDependencies": {
-    "eslint": "^8.55.0",
-    "eslint-plugin-haraka": "*",
-    "mocha": "^10.2.0"
+    "eslint-plugin-haraka": "*"
   }
 }