0.3.0

* fix relying on package.json
* handle private packages nicely