Better to be package-private. `protected` implies that you expect it to be called by, or overridden by, subclasses, which is not the case here.