especially important since npm doesn't really work with private modules