list-npm-package-content

To verify npm package contents before publishing, run a script that builds, packs, and lists the tarball files. This validates that the package respects the files field, .npmignore, and .gitignore rules, reducing the risk of missing files or leaking unintended data.

Your npm publish includes unwanted files if packaging rules are misconfigured. Debug this by listing the tarball contents before publishing to audit which files are included and ensure the files field, .npmignore, and .gitignore rules are properly honored.

The npm pack process honors the files field, .npmignore, and .gitignore rules to determine what gets packed. Listing the tarball contents before publishing allows you to validate that these packaging rules are correctly applied and only intended assets are included.

Yes, pnpm is required as a dependency to run the script that builds, packs, and lists your npm tarball contents. The script operates via pnpm to manage the temporary artifacts and cleanup required for auditing the package before release.

The best way to audit an npm package before release is to pack the tarball and list its contents. This allows you to verify file inclusion, debug publish issues, and ensure compliance with packaging rules by checking the exact files that will be published.