add private true to package.json to avoid publishing on npm