Suggestion for module check: "npm install --omit=dev"

I was just recently setting up a new mirror and had to reinstall all modules. I noticed that many had security warnings on npm install, and when I looked deeper, some could be avoided by not installing the dev dependencies. Given that most users don't dev, should we include a check that suggests to maintainers that they include npm install --omit=dev in their install and update instructions to avoid unnecessary dependency installs?

We could even go so far as to only offer this suggestion when there is a devDependencies section in the package.json

Maybe that gets too complicated given that we then need to include a dev section at the end that explains to install the dev dependencies.

Start by reviewing the existing module checks and the install/update guidance, then inspect how package.json devDependencies are detected. Define whether the suggestion applies only when devDependencies exists and how developer installs are explained; done means the behavior and wording are agreed and covered by the relevant checks.