Package.json: prevent accidental publishing