remove `private: true` from package.json