diff --git a/.gitignore b/.gitignore
index 52e78dd..3b58a07 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,3 +9,5 @@ yarn.lock
 
 # symlinked file used in tests
 test/resolver/symlinked/_/node_modules/package
+
+.npmignore
diff --git a/.npmignore b/.npmignore
deleted file mode 100644
index 2c0af0d..0000000
--- a/.npmignore
+++ /dev/null
@@ -1,14 +0,0 @@
-# gitignore
-node_modules
-**/node_modules
-
-# Only apps should have lockfiles
-npm-shrinkwrap.json
-package-lock.json
-yarn.lock
-
-# symlinked file used in tests
-test/resolver/symlinked/_/node_modules/package
-
-.github/workflows
-appveyor.yml
diff --git a/package.json b/package.json
index 5ec4be6..09296cd 100644
--- a/package.json
+++ b/package.json
@@ -17,6 +17,7 @@
 		"module"
 	],
 	"scripts": {
+		"prepack": "npmignore --auto --commentLines=autogenerated",
 		"prepublishOnly": "safe-publish-latest && cp node_modules/is-core-module/core.json ./lib/ ||:",
 		"prepublish": "not-in-publish || npm run prepublishOnly",
 		"prelint": "eclint check $(git ls-files | xargs find 2> /dev/null | grep -vE 'node_modules|\\.git')",
@@ -38,6 +39,7 @@
 		"in-publish": "^2.0.1",
 		"mkdirp": "^0.5.5",
 		"mv": "^2.1.1",
+		"npmignore": "^0.3.0",
 		"object-keys": "^1.1.1",
 		"rimraf": "^2.7.1",
 		"safe-publish-latest": "^2.0.0",
@@ -58,5 +60,11 @@
 		"is-core-module": "^2.9.0",
 		"path-parse": "^1.0.7",
 		"supports-preserve-symlinks-flag": "^1.0.0"
+	},
+	"publishConfig": {
+		"ignore": [
+			".github/workflows",
+			"appveyor.yml"
+		]
 	}
 }