Should .npmrc be ignored?

The Fontawesome Pro instructions describe placing a secret key in a .npmrc file but it is unclear how this file should be managed. Specifically, should this file be ignored by Git?

The Fontawesome Pro instructions are correct as an example of the general approach to managing sensitive information in a .nmprc file :

• all sensitive values there should be replaced by environment variables, and
• those variables should then be defined as managed secrets in whatever environment the repo will be pushed to.