From 470291affc26c7453f8dc8f656b615d4381a7ad4 Mon Sep 17 00:00:00 2001
From: Denys Usenko <dusenko@godaddy.com>
Date: Fri, 29 May 2026 16:56:05 +0300
Subject: [PATCH 1/2] chore: add License section, .npmignore, switch repository
 URL to HTTPS

---
 .npmignore   | 18 ++++++++++++++++++
 README.md    |  4 ++++
 package.json |  2 +-
 3 files changed, 23 insertions(+), 1 deletion(-)
 create mode 100644 .npmignore

diff --git a/.npmignore b/.npmignore
new file mode 100644
index 0000000..77fe019
--- /dev/null
+++ b/.npmignore
@@ -0,0 +1,18 @@
+# CI/CD and tooling
+.github/
+.tartufo/
+tartufo.toml
+.jshintrc
+.nvmrc
+.npmrc
+
+# Community/governance docs (not needed by consumers)
+CODE_OF_CONDUCT.md
+CONTRIBUTING.md
+SECURITY.md
+
+# Development artifacts
+node_modules/
+coverage/
+*.tgz
+.nyc_output/
diff --git a/README.md b/README.md
index 11a4c8b..93deb78 100644
--- a/README.md
+++ b/README.md
@@ -290,3 +290,7 @@ poynt.charge(
 - `unregisterApplePayMerchant`
 - `getApplePayMerchant`
 - `getApplePayDomainAssociationFile`
+
+## License
+
+MIT - see [LICENSE](./LICENSE).
diff --git a/package.json b/package.json
index 4a151e4..7fa491c 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git@github.com:godaddy/poynt-node.git"
+    "url": "https://github.com/godaddy/poynt-node.git"
   },
   "keywords": [
     "Poynt",

From 5cd47a7db8cd8480d66ae5c6154cf6e5ac7962b1 Mon Sep 17 00:00:00 2001
From: Denys Usenko <dusenko@godaddy.com>
Date: Mon, 1 Jun 2026 14:30:59 +0300
Subject: [PATCH 2/2] chore: switch to files allowlist, log changes in
 CHANGELOG

Replace .npmignore with package.json files allowlist (lib + CHANGELOG.md).
Allowlist > denylist for npm publishing - future top-level files cannot
accidentally leak. Identical 24-file tarball.
---
 .npmignore   | 18 ------------------
 CHANGELOG.md |  6 ++++++
 package.json |  4 ++++
 3 files changed, 10 insertions(+), 18 deletions(-)
 delete mode 100644 .npmignore

diff --git a/.npmignore b/.npmignore
deleted file mode 100644
index 77fe019..0000000
--- a/.npmignore
+++ /dev/null
@@ -1,18 +0,0 @@
-# CI/CD and tooling
-.github/
-.tartufo/
-tartufo.toml
-.jshintrc
-.nvmrc
-.npmrc
-
-# Community/governance docs (not needed by consumers)
-CODE_OF_CONDUCT.md
-CONTRIBUTING.md
-SECURITY.md
-
-# Development artifacts
-node_modules/
-coverage/
-*.tgz
-.nyc_output/
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 749aa7f..b128947 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### Added
+- `package.json` `files` allowlist - publishes only `lib/` and `CHANGELOG.md` alongside the npm-default `README.md`, `LICENSE`, and `package.json`. Trims `.github/`, `.tartufo/`, `tartufo.toml`, `.jshintrc`, `.nvmrc`, `.npmrc`, `CODE_OF_CONDUCT.md`, `CONTRIBUTING.md`, and `SECURITY.md` from the published tarball.
+- `README.md` - License section pointing to `LICENSE`.
+
+### Changed
+- `package.json` `repository.url` - SSH (`git@github.com:...`) -> HTTPS (`https://github.com/...`); npm convention and avoids `npm publish` warnings.
 
 ## [0.0.49] - 2026-03-03
 ### Added
diff --git a/package.json b/package.json
index 7fa491c..acbd951 100644
--- a/package.json
+++ b/package.json
@@ -3,6 +3,10 @@
   "version": "0.0.49",
   "description": "Poynt Node.js SDK",
   "main": "lib/index.js",
+  "files": [
+    "lib",
+    "CHANGELOG.md"
+  ],
   "engines": {
     "node": ">=14.0.0"
   },