make `outdated` ignore private packages

review please :)

fixes #6762
This feels like oddly defensive programming in npm, but I think I'd be more comfortable if the full expression were `if (d && d.name && d.private)`.