Thanks all for the answers!
@_exported did the trick.
I realize that _ means it's private, but it works for us so far, since package manager is (yet) not the main dependency management tool, so we won't be impacted if @_exported is removed. Well, maybe we'll be a bit upset 