prevent accidental npm publish

Added `”private”:true`, which prevents publishing to npm accidentally via [npm "private"](https://npmjs.org/doc/json.html#private)