See for example the difference between a Libertinus release and the CTAN package.

The biggest thing is the included fonts directory should be filtered to just static/OTFS and flattened.