publish sources with NPM