chore: restrict npm package contents and add NOTICE

- add a files whitelist so only dist and the top-level docs are published;
  this drops tests, benchmark, docs, examples, docker-compose files, CI
  config and dot-directories such as .claude/.specify/.omc from the tarball
- add the ASF NOTICE file
- add repository/homepage/bugs metadata and set the author
- clean dist before building so deleted sources no longer leave stale
  artifacts behind in the package
diff --git a/NOTICE b/NOTICE
new file mode 100644
index 0000000..7ec5fb4
--- /dev/null
+++ b/NOTICE
@@ -0,0 +1,10 @@
+Apache IoTDB Client for Node.js
+Copyright 2026 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+The Thrift service definitions in this product are derived from the
+Apache IoTDB project (https://iotdb.apache.org/), and the generated
+Thrift stubs are produced with the Apache Thrift compiler
+(https://thrift.apache.org/).
diff --git a/package.json b/package.json
index 1953a58..2380462 100644
--- a/package.json
+++ b/package.json
@@ -7,7 +7,24 @@
   "description": "Apache IoTDB Node.js client with SessionPool and TableSessionPool support",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "files": [
+    "dist/",
+    "README.md",
+    "README_zh.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/apache/iotdb-client-nodejs.git"
+  },
+  "homepage": "https://iotdb.apache.org/",
+  "bugs": {
+    "url": "https://github.com/apache/iotdb-client-nodejs/issues"
+  },
   "scripts": {
+    "prebuild": "node -e \"require('fs').rmSync('dist', { recursive: true, force: true })\"",
     "build": "npm run build:esbuild && npm run build:types && npm run copy:thrift",
     "build:esbuild": "node esbuild.config.js",
     "build:types": "tsc --emitDeclarationOnly",
@@ -32,7 +49,7 @@
     "thrift",
     "apache"
   ],
-  "author": "",
+  "author": "The Apache Software Foundation",
   "license": "Apache-2.0",
   "dependencies": {
     "denque": "^2.1.0",