update spmrc
remove bundledDependencies, it cannout reduce the requests
protect private repo. docs on package
fix the theme for nico 0.3