Smuggling .gitignore, .npmrc and friends in npm packages | Dark Hacker News