no need to mark package.json private