diff --git a/packages/config/package-lock.json b/packages/config/package-lock.json
index 66d3822..ab6c8e3 100644
--- a/packages/config/package-lock.json
+++ b/packages/config/package-lock.json
@@ -1,4 +1,34 @@
 {
   "name": "@rondo.dev/config",
-  "lockfileVersion": 1
+  "requires": true,
+  "lockfileVersion": 1,
+  "dependencies": {
+    "argparse": {
+      "version": "1.0.10",
+      "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
+      "integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==",
+      "requires": {
+        "sprintf-js": "~1.0.2"
+      }
+    },
+    "esprima": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz",
+      "integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A=="
+    },
+    "js-yaml": {
+      "version": "3.13.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.13.1.tgz",
+      "integrity": "sha512-YfbcO7jXDdyj0DGxYVSlSeQNHbD7XPWvrVWeVUujrQEoZzWJIRrCPoyk6kL6IAjAG2IolMK4T0hNUe0HOUs5Jw==",
+      "requires": {
+        "argparse": "^1.0.7",
+        "esprima": "^4.0.0"
+      }
+    },
+    "sprintf-js": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz",
+      "integrity": "sha1-BOaSb2YolTVPPdAVIDYzuFcpfiw="
+    }
+  }
 }
diff --git a/packages/config/package.json b/packages/config/package.json
index 4bf7df5..4bd7540 100644
--- a/packages/config/package.json
+++ b/packages/config/package.json
@@ -7,7 +7,9 @@
     "compile": "tsc",
     "clean": "rm -rf lib/"
   },
-  "dependencies": {},
+  "dependencies": {
+    "js-yaml": "^3.12.1"
+  },
   "main": "lib/index.js",
   "types": "lib/index.d.ts"
 }
diff --git a/packages/server/package.json b/packages/server/package.json
index 075e3b9..0209665 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -22,7 +22,6 @@
     "express": "^4.16.4",
     "express-session": "^1.15.6",
     "http-errors": "^1.7.1",
-    "js-yaml": "^3.12.1",
     "passport": "^0.4.0",
     "passport-google": "^0.3.0",
     "passport-local": "^1.0.0",