1. Private npm packages that are published in your npm private registry.
2. NPM Personal Access Token(PAT).
3. Users with valid read permissions should have access to the package and the organization and they can create Token.