make `outdated` ignore private packages

review please :)

fixes #6762
`test/tap/add-remote-git.js` is the most recent example of this that @smikes and I put together.