make package.json of project private