package json not private