[meta] add npmignore and safe-publish-latest

Author: ljharb

.gitignore

@@ -4,3 +4,5 @@ node_modules
 npm-shrinkwrap.json
 package-lock.json
 yarn.lock
+
+.npmignore

package.json

@@ -4,6 +4,9 @@
 	"description": "abstract base class for crypto-streams",
 	"main": "index.js",
 	"scripts": {
+		"prepack": "npmignore --auto --commentLines=autogenerated",
+		"prepublishOnly": "safe-publish-latest",
+		"prepublish": "not-in-publish || npm run prepublishOnly",
 		"lint": "eslint --ext=js,.mjs .",
 		"pretest": "npm run lint",
 		"test": "npm run tests-only",
@@ -31,8 +34,16 @@
 	"devDependencies": {
 		"@ljharb/eslint-config": "^21.1.1",
 		"eslint": "=8.8.0",
+		"in-publish": "^2.0.1",
+		"npmignore": "^0.3.1",
+		"safe-publish-latest": "^2.0.0",
 		"tape": "^5.9.0"
 	},
+	"publishConfig": {
+		"ignore": [
+			".github/workflows"
+		]
+	},
 	"engines": {
 		"node": ">= 0.10"
 	}