diff --git a/package.json b/package.json
index 923c6a3c1f..17f29f8486 100644
--- a/package.json
+++ b/package.json
@@ -12,7 +12,7 @@
     "bytes": "^2.2.0",
     "colors": "1.1.2",
     "compression": "1.7.0",
-    "connect-busboy": "0.0.2",
+    "connect-busboy": "^1.0.0",
     "connect-redis": "3.0.2",
     "cookie-parser": "1.4.1",
     "cors": "2.7.1",
@@ -25,8 +25,8 @@
     "helmet": "1.3.0",
     "ioredis": "2.0.0",
     "jpush-sdk": "3.3.2",
-    "loader-builder": "2.4.1",
     "loader": "2.1.1",
+    "loader-builder": "2.4.1",
     "lodash": "4.17.21",
     "log4js": "^0.6.29",
     "markdown-it": "6.0.0",
@@ -46,12 +46,12 @@
     "ready": "0.1.1",
     "request": "2.81.0",
     "response-time": "2.3.1",
+    "snyk": "^1.88.0",
     "superagent": "2.0.0",
     "utility": "1.6.0",
     "validator": "5.1.0",
     "xmlbuilder": "7.0.0",
-    "xss": "0.2.10",
-    "snyk": "^1.88.0"
+    "xss": "0.2.10"
   },
   "devDependencies": {
     "errorhandler": "1.4.3",
@@ -60,6 +60,7 @@
     "mm": "1.3.5",
     "mocha": "2.4.5",
     "nock": "7.5.0",
+    "nodemon": "^2.0.19",
     "pedding": "1.0.0",
     "should": "8.3.0",
     "supertest": "1.2.0"
@@ -67,7 +68,8 @@
   "scripts": {
     "test": "make test",
     "snyk-protect": "snyk protect",
-    "prepare": "npm run snyk-protect"
+    "prepare": "npm run snyk-protect",
+    "dev": "nodemon app"
   },
   "snyk": true
 }