A manifest with "private": true keeps its version out of the index. A Git package that is private on the default branch is not listed at all, and the generator warns when every bundle package of a repository is private. The cache version is bumped so cached private releases are rebuilt.