add .npmignore and correct package.json