add npmignore to see if that stops `npm publish` from messing up