github as private npm post