disallow publishing on top of an existing package - closes #28