diff --git a/npm.yaml b/npm.yaml
index 641f85b360e6..69632369ad07 100644
--- a/npm.yaml
+++ b/npm.yaml
@@ -1,7 +1,7 @@
 package:
   name: npm
   version: "11.13.0"
-  epoch: 0
+  epoch: 1
   description: "the npm package manager for javascript, mainline"
   copyright:
     - license: Artistic-2.0
@@ -30,6 +30,8 @@ pipeline:
     runs: |
       npm install --include=dev --ignore-scripts
       npm run build -w docs
+      npm prune --omit=dev
+      rm -rf .git*
 
   - name: Patch vulnerable vendored packages
     runs: |