Package marked as private in package.json