Install from github packages

I don’t understand how to install a private github package.
from going through docs it seems that I need to use .npmrc and reference its authentication credentials (access token) to glitch’s .env secrets.
Thing is I would need to share the glitch project with team members / contributers to work on, but I don’t want to expose my .npmrc token that is placed in the .env file where team members can view.