build: prevent things from publishing to npm