Hello, I have created a private project in my account which I am using for maven package registry.
I am able to create and push my jar to package registry by generating private token as described by
gitlab doc Index · Maven repository · Packages · User · Help · GitLab,
Now the problem I am facing is even though my project is private I am able to add my package to other project even without providing private-token.
I want to understand why it is not asking for private-token while fetching package ?