It really depends what&#x27;s in the .npmrc. For example, you might have one containing only a setting to use absolute versions when installing packages and saving them. It&#x27;s also worth noting that it&#x27;s a good idea (although I always forget) to use the files field of package.json to act as a whitelist.<p>Edit: the author notes that these are excluded by npm anyway these days. The documentation does not reflect this.