Private property in package.json

used to prevent accidental package publishing