From 3e8fcac3031bcbb6d0838bf0d9f72b122d90941c Mon Sep 17 00:00:00 2001
From: David Baker <dave@matrix.org>
Date: Tue, 1 Nov 2016 15:15:31 +0000
Subject: [PATCH 1/2] Explicitly list file sin package.json

To avoid publishing whatever happens to be in the working copy.

Equivalent of https://github.com/vector-im/vector-web/pull/2516
for react-sdk.
---
 package.json | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/package.json b/package.json
index baeb670c5e..498514a2b0 100644
--- a/package.json
+++ b/package.json
@@ -9,6 +9,23 @@
   },
   "license": "Apache-2.0",
   "main": "lib/index.js",
+  "files": [
+    "CHANGELOG.md",
+    "CONTRIBUTING.rst",
+    "LICENSE",
+    "README.md",
+    "code_style.md",
+    "git-revision.txt",
+    "header",
+    "jenkins.sh",
+    "karma.conf.js",
+    "lib",
+    "package.json",
+    "release.sh",
+    "scripts",
+    "src",
+    "test"
+  ],
   "bin": {
     "reskindex": "scripts/reskindex.js"
   },

From ce197398990e36fb007480022c7143cb49f519de Mon Sep 17 00:00:00 2001
From: David Baker <dave@matrix.org>
Date: Tue, 1 Nov 2016 15:16:49 +0000
Subject: [PATCH 2/2] Remove .npmignore as it's superseeded by 'files'

And also seems to be out of date anyway
---
 .npmignore | 3 ---
 1 file changed, 3 deletions(-)
 delete mode 100644 .npmignore

diff --git a/.npmignore b/.npmignore
deleted file mode 100644
index 598224712f..0000000000
--- a/.npmignore
+++ /dev/null
@@ -1,3 +0,0 @@
-example
-examples
-.module-cache