build: make package private and update repository

The package needs to be set to private, as we aren't members of
@semantic-release, and so can't publish this to NPM.
The licence and repository URL were also out of date, and have now
been updated.