Empty npmignore trumps npm's (presumed) gitignore fallback.