exclude package.json when publishing; #2