The version field is still required, but we can additionally add a private for both semantic signalling and preventing this from being published to npm.