Smuggling .gitignore, .npmrc and friends in npm packages | Hacker News Reader