made package private -- publishing to NPM registry makes no sense ...