I guess there is the "files" and ".npmignore" which handle these, but they don't seem to be widely used in the community.