`npm ci` does not fail when package is incorrectly marked as dev

What I Wanted to Do

Move a package from devDependencies to dependencies, then run npm ci --only=production and get an error

What Happened Instead

npm ci --only-production passed and removed the package.

Reproduction Steps

git clone https://github.com/palf/npm-ci-issue.git
cd npm-ci-issue
npm run test

Details

Platform Info

$ npm --versions
{ '01-missing-from-lock': '1.0.0',
  npm: '6.4.1',
  ares: '1.15.0',
  cldr: '33.1',
  http_parser: '2.8.0',
  icu: '62.1',
  modules: '64',
  napi: '3',
  nghttp2: '1.34.0',
  node: '10.15.3',
  openssl: '1.1.0j',
  tz: '2018e',
  unicode: '11.0',
  uv: '1.23.2',
  v8: '6.8.275.32-node.51',
  zlib: '1.2.11' }

$ node -p process.platform
linux