packages.aeronsystems.com: Aeron's private npm registry for @aeron-systems/*. In a repository's .npmrc: @aeron-systems:registry=https://packages.aeronsystems.com //packages.aeronsystems.com/:_authToken=${NODE_AUTH_TOKEN} NODE_AUTH_TOKEN is not a stored secret. It is: on a laptop your GitHub login: export NODE_AUTH_TOKEN=$(gh auth token) in GitHub Actions the job's own GITHUB_TOKEN on Vercel the build's own identity: NODE_AUTH_TOKEN=$VERCEL_OIDC_TOKEN Every download is logged. Full instructions: the README in aeron-systems/hydron, cloudflare/packages.