UPM CLI pack silently drops *.zip.bytes files from signed package tarballs

Sorry to hear you’re running into this and thanks for the detailed repro, it was very helpful.

We’re looking into the best way to address the underlying issue. In the meantime, you can work around it by adding a .npmignore file at the root of your package folder with a negation for the affected file types. You can either target the specific extensions you need:

!*.zip.bytes

or use a broader pattern to cover all files with zip in the name:

!*.zip*

This will ensure those files are included in the packed tarball. If you have other affected extensions, add a line for each one.