diff --git a/package.json b/package.json
index 0467e58..c27639a 100644
--- a/package.json
+++ b/package.json
@@ -14,7 +14,8 @@
     "binding.js",
     "CMakeLists.txt",
     "lib",
-    "prebuilds"
+    "prebuilds",
+    "vendor/boringssl"
   ],
   "scripts": {
     "test": "standard & bare test.js"
diff --git a/vendor/.npmignore b/vendor/.npmignore
new file mode 100644
index 0000000..58edcb0
--- /dev/null
+++ b/vendor/.npmignore
@@ -0,0 +1,29 @@
+boringssl/**
+
+!boringssl/CMakeLists.txt
+!boringssl/LICENSE
+!boringssl/cmake/**
+!boringssl/gen/**
+!boringssl/ssl/**
+!boringssl/crypto/**
+!boringssl/util/**
+!boringssl/pki/**
+!boringssl/decrepit/**
+!boringssl/tool/**
+!boringssl/include/**
+!boringssl/third_party/googletest/**
+!boringssl/third_party/fiat/**
+
+boringssl/**/.clang-format
+boringssl/**/.github
+boringssl/**/*.py
+boringssl/**/*.sh
+boringssl/**/*.md
+boringssl/**/*.bzl
+boringssl/**/*.bazel
+boringssl/**/*.gn
+boringssl/**/*.chromium
+boringssl/**/*.toplevel
+
+boringssl/**/docs
+boringssl/**/testdata