Simplify package.json and make the package private