make `outdated` ignore private packages

review please :)

fixes #6762
Can you generate the fixtures here instead of adding a bunch of new static assets to the test directory? That's the direction that @isaacs, @iarna, and I have been moving over the course of this year, and it's one of the things I want to be part of the standard test case when we fix up all the tests early next year.