Set "private": true to avoid npm publish

This field is appropriate for generated projects that shouldn't (by default) be intended to be published to the npm registry via `npm publish`. Setting this flag will prevent accidental publication.