packagejson knows there are dependencies that are not used

There is a package for that.

npm install -g depcheck

Run in your project directory

depcheck

See the results

Unused dependencies
* chalk
* express
Unused devDependencies
* nodemon