limit files posted to npm [ci skip]