Mark package.json private for now