Add private:true to package.json to prevent accidental publishing.