Add npmignore: releasing with `npm publish` contains a lot of unrequired crap

mozilla / eslint-plugin-no-unsanitized

Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike

Mozilla Public License 2.0

223 stars 34 forks source link

Closed mozfreddyb closed 3 years ago

mozfreddyb commented 4 years ago

Could be a good bug for a contributor: Adding an npmignore would help us reducing bloat and prevent us from unexpectedly adding unwanted stuff to our packages. This page contains further info https://blog.npmjs.org/post/165769683050/publishing-what-you-mean-to-publish

mozfreddyb commented 4 years ago

individual action items:

[ ] figure out how npmignore files work (link above)
[ ] add npm publish with known source files and docs
[ ] do an alpha-release with that npmignore file and push it as an alpha version to npm
[ ] have someone from the core contributors (e.g., me :)) download that release and verify it still works (e.g., using tests)