IMO this is the correct approach - Exposing every single file in the repository (including files that don't need to be public) sounds terrible.