Package.json should have a `files` attribute so we don't end up getting everything. Perhaps there's something analogous for bower.json.