make `outdated` ignore private packages

review please :)

fixes #6762
So create folders and files like `test/tap/install-at-locally.js` (then clean up afterwards)? Trying to find a test which does this that I can follow as an example.