npm will use .gitignore when .npmignore is not present, which is better