package.json: quotes around private: true