Problem Statement

Not needed runtime:

• vendor/sentry/sentry/scripts/bump-version.sh

May trigger vulnerability report, that package installed shell script, so better just skip it via .gitattributes

Solution Brainstorm

Also review other files that don't deserve to be in composer dist.