mark package as private (do not push to npm)