Adding a package.json, marking as private to prevent accidental publication to npm