E.g. it puts package.json and package-lock.json in the zip. There's probably some way to select files to ignore.