https://docs.npmjs.com/files/package.json#private anyone hoping to avoid the same fate