.npmignore isn't respected for git repos
clone & checkout instead of archive (fixes #6400)