The best way for a user to know if they're violating public/private boundaries is for them to see it in their imports. If they imports have modules with leading underscores, that's a universally understood notation for "private"