prevent package from being published to the npm registry