diff --git a/functions/package.json b/functions/package.json
index f7b2b42..f11d62b 100644
--- a/functions/package.json
+++ b/functions/package.json
@@ -10,6 +10,7 @@
   },
   "main": "lib/index.js",
   "dependencies": {
+    "cors": "^2.8.4",
     "firebase-admin": "~5.12.1",
     "firebase-functions": "^1.0.3",
     "paypal-rest-sdk": "^1.8.1"
diff --git a/package.json b/package.json
index 4dcb7d3..e48ea43 100644
--- a/package.json
+++ b/package.json
@@ -28,7 +28,6 @@
     "@angular/service-worker": "^6.0.0",
     "angularfire2": "^5.0.0-rc.11",
     "core-js": "^2.5.4",
-    "cors": "^2.8.4",
     "electron": "^2.0.4",
     "electron-packager": "^12.1.0",
     "firebase": "^5.1.0",
diff --git a/yarn.lock b/yarn.lock
index 3c4d2e5..37f09f1 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2014,13 +2014,6 @@ core-util-is@1.0.2, core-util-is@~1.0.0:
   version "1.0.2"
   resolved "https://registry.yarnpkg.com/core-util-is/-/core-util-is-1.0.2.tgz#b5fd54220aa2bc5ab57aab7140c940754503c1a7"
 
-cors@^2.8.4:
-  version "2.8.4"
-  resolved "https://registry.yarnpkg.com/cors/-/cors-2.8.4.tgz#2bd381f2eb201020105cd50ea59da63090694686"
-  dependencies:
-    object-assign "^4"
-    vary "^1"
-
 cosmiconfig@^2.1.0, cosmiconfig@^2.1.1:
   version "2.2.2"
   resolved "https://registry.yarnpkg.com/cosmiconfig/-/cosmiconfig-2.2.2.tgz#6173cebd56fac042c1f4390edf7af6c07c7cb892"
@@ -5931,7 +5924,7 @@ object-assign@^3.0.0:
   version "3.0.0"
   resolved "https://registry.yarnpkg.com/object-assign/-/object-assign-3.0.0.tgz#9bedd5ca0897949bca47e7ff408062d549f587f2"
 
-object-assign@^4, object-assign@^4.0.1, object-assign@^4.1.0:
+object-assign@^4.0.1, object-assign@^4.1.0:
   version "4.1.1"
   resolved "https://registry.yarnpkg.com/object-assign/-/object-assign-4.1.1.tgz#2109adc7965887cfc05cbbd442cac8bfbb360863"
 
@@ -8573,7 +8566,7 @@ validate-npm-package-name@^3.0.0:
   dependencies:
     builtins "^1.0.3"
 
-vary@^1, vary@~1.1.2:
+vary@~1.1.2:
   version "1.1.2"
   resolved "https://registry.yarnpkg.com/vary/-/vary-1.1.2.tgz#2299f02c6ded30d4a5961b0b9f74524a18f634fc"