Mark as private

This way the package should not end up in NPM accidentally.
Define Bower component.json