add .npmignore and update package.json