Set package.json to be private

Signed-off-by: Patrick Wagstrom <patrick@wagstrom.net>