linter
packages shall be installed under dev-dependencies.
-
whitelisting is the first option.
https://itnext.io/step-by-step-building-and-publishing-an-npm-typescript-package-44fe7164964c
https://blog.npmjs.org/post/165769683050/publishing-what-you-mean-to-publish
- linter, formatter's config shall note be included.