There is a development dependency on `http-signature-zcap-invoke`. That package has a development dependency to this package. This should be addressed. Also see https://github.com/digitalbazaar/http-signature-zcap-invoke/issues/24.