Raphael clued me in on https://docs.npmjs.com/misc/developers#keeping-files-out-of-your-package which we should most definintely be doing for `tests/` as normal consumers have no reason to get these files during distribution.