restrict files published to npm. props @aristiden7o.