Investigate how to prevent errant publishes

[jo-sm]

Based on #100.

Package version 2.2.0 was broken because it was published manually without the right files. I think I had created the package without actually building, causing /dist to be missing.

I was able to fix it by creating a new version and letting the CI do it, but to avoid this from happening in the future there should be some other mechanisms in place to prevent it.