prevent accidental npm publishing

Added `"private":true`, which prevents the module from being accidentally published to npm

https://npmjs.org/doc/json.html#private