Include minified assets in npm release

[fulldecent]

Currently, npm releases include only index.js. Additionally, or alternatively, they should include a minified file. This has security implications

Security impact

CDNs like JSDelivr see non-minified files as suboptimal and they transpile them into minified versions before delivery. This is a proprietary and non-repeatable process.

For business reasons, JSDeliver will not support SRI for transpiled assets. Source: jsdelivr/jsdelivr#18105 (comment)

Currently, the build process is not auditable and security is not optimized because SRI is not available with the current distribution strategy.

Reference

Latest npm release: https://www.npmjs.com/package/web3/v/1.0.0-beta.36

I don't know how to properly cite the file tree. But I installed it and made a screenshot.

[fulldecent]

Maybe this is duplicate or maybe GitHub is showing me errors for no reason today.

[fulldecent]

Yup GitHub is down https://status.github.com/messages

[fulldecent]

Duplicate of #2013