made package file private to prevent accidental publishing to npm