diff --git a/package-lock.json b/package-lock.json
index dd62cfc8..89176acb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2181,7 +2181,6 @@
         "graphql-subscriptions": "^0.5.8",
         "graphql-tag": "^2.9.2",
         "graphql-tools": "^3.0.4",
-        "hash.js": "^1.1.3",
         "lodash": "^4.17.10",
         "subscriptions-transport-ws": "^0.9.11",
         "ws": "^5.2.0"
@@ -6430,6 +6429,7 @@
       "version": "1.1.5",
       "resolved": "https://registry.npmjs.org/hash.js/-/hash.js-1.1.5.tgz",
       "integrity": "sha512-eWI5HG9Np+eHV1KQhisXWwM+4EPPYe5dFX1UZZH7k/E3JzDEazVH+VGlZi6R94ZqImq+A3D1mCEtrFIfg/E7sA==",
+      "dev": true,
       "requires": {
         "inherits": "^2.0.3",
         "minimalistic-assert": "^1.0.1"
@@ -9243,7 +9243,8 @@
     "minimalistic-assert": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz",
-      "integrity": "sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A=="
+      "integrity": "sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==",
+      "dev": true
     },
     "minimatch": {
       "version": "3.0.4",
diff --git a/packages/apollo-server-core/package.json b/packages/apollo-server-core/package.json
index fa62eb73..e243cefb 100644
--- a/packages/apollo-server-core/package.json
+++ b/packages/apollo-server-core/package.json
@@ -42,7 +42,6 @@
     "graphql-subscriptions": "^0.5.8",
     "graphql-tag": "^2.9.2",
     "graphql-tools": "^3.0.4",
-    "hash.js": "^1.1.3",
     "lodash": "^4.17.10",
     "subscriptions-transport-ws": "^0.9.11",
     "ws": "^5.2.0"
diff --git a/packages/apollo-server-core/src/runHttpQuery.ts b/packages/apollo-server-core/src/runHttpQuery.ts
index e675372b..6383bc75 100644
--- a/packages/apollo-server-core/src/runHttpQuery.ts
+++ b/packages/apollo-server-core/src/runHttpQuery.ts
@@ -1,5 +1,4 @@
 import { ExecutionResult } from 'graphql';
-const sha256 = require('hash.js/lib/hash/sha/256');
 
 import { CacheControlExtensionOptions } from 'apollo-cache-control';
 
diff --git a/packages/apollo-server-core/tsconfig.json b/packages/apollo-server-core/tsconfig.json
index 21f70608..b8b81721 100644
--- a/packages/apollo-server-core/tsconfig.json
+++ b/packages/apollo-server-core/tsconfig.json
@@ -2,8 +2,7 @@
   "extends": "../../tsconfig",
   "compilerOptions": {
     "rootDir": "./src",
-    "outDir": "./dist",
-    "noUnusedLocals": false,
+    "outDir": "./dist"
   },
   "include": ["src/**/*"],
   "exclude": ["**/__tests__", "**/__mocks__"]