diff --git a/TODO.md b/TODO.md
index ee97939..cf5d577 100644
--- a/TODO.md
+++ b/TODO.md
@@ -23,6 +23,11 @@ Run `make frontend-viewport-test` in CI as its own step; it is not part of
 
 # Completed Steps
 
+- 2026-10-19: `package.json` has no `version` field and is marked
+  `"private": true` ([#158](https://git.eeqj.de/sneak/netwatch/issues/158)). It
+  said `1.0.0`, a release that has not been made, and nothing read it; the git
+  tag is the one version, which the image and `make build` take from
+  `git describe --tags`. The package is never published
 - 2026-10-19: Status names `v1.0.0-rc1`, the first release candidate, and says
   release candidates are tagged on `next`, where it said there were no git tags
   ([#157](https://git.eeqj.de/sneak/netwatch/issues/157)). The rest of Status
diff --git a/package.json b/package.json
index 6acde58..be9e3fa 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "netwatch",
-    "version": "1.0.0",
+    "private": true,
     "description": "Real-time network latency monitor SPA",
     "type": "module",
     "scripts": {