You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
publish: Honor an npm-style files allowlist in package.json when packing a tarball. Listed directories pack recursively, glob patterns and ! negations are supported with last-match-wins precedence, and package.json, README*, LICENSE* and the main entry point are always packed. The built-in denylist still applies after the allowlist, and an empty or malformed files value falls back to packing everything.
Docs
Document the files allowlist behavior and its precedence rules in the README
