add a private attribute in package.json to avoid publishing on npm