This is very suboptimal but I had to go with Ryan’s advice too.
I made it a little more specific:
"nohoist": [
"**/serverless-*/**"
]
But there are significant issues, most notably that dev dependencies are bundled with your app: https://github.com/serverless/serverless/pull/3889#issuecomment-414547166