installing packages from github private repos

Dear all,

I have some questions concerning the use of private repositories on github:

  1. do anyone know if it is possible in any way to allow users installing a package from a private github repo without having to share an access token?

  2. In case it is not possible, is it possible to "link" a token to a specific repository and/or allow only "read" operations?

  3. Do you have any hints about best practices to share the tokens?

    Thanks in advance for any help !

I suggest putting the repo file hierarchy on AWS S3 public under an obscure name