This will always be falsy, as long as `_checkNpmCredentials` is called before `_cloneRepo`, since only afterwards might `Release.npmPublish` be `true`.