npm publish checks "private"

Repositories with `"private": true` in `package.json` should not be published
to.