unset privacy flag in package.json