Use package.files, not .npmignore