use boolean "private": true in _package.json

https://npmjs.org/doc/json.html#private