Simply leave the function out of the package specification:
CREATE OR REPLACE PACKAGE pkg IS
PROCEDURE public_proc;
END;
/
CREATE OR REPLACE PACKAGE BODY pkg IS
-- This procedure is private: it can only be called from within the package
PROCEDURE private_proc IS
BEGIN
NULL;
END;
PROCEDURE public_proc IS
BEGIN
private_proc;
END;
END;
/