Imagine the following situation
Company A has a npm organization with all its members inside. Company B has a npm organization with a private package it wants to share with company A. (Read Only)
How can members of company A access private packages of both organization without adding all members to company B's npm organization?
I have thought of different solutions but none of them is satisfying.
Add a new user (user123) to both organizations. Every member of organization A has to use user123's npm token to install the packages. -> Problem: Users have to switch npm tokens all the time. When a member leaves company A you have to rotate user123's npm token.
Add every member of organization A to organization B aswell. -> Problem: This is costly as every member inside a organization costs 7$/User/Month. You also have to notice company B that one of your members left your organization so they can remove them.
Is there a way to grant a npm company access to another npm companys private packages?