Installing maven package from package registry from Gitlab

Hello, I have created a private project in my account which I am using for maven package registry.

I am able to create and push my jar to package registry by generating private token as described by

gitlab doc Index · Maven repository · Packages · User · Help · GitLab,

Now the problem I am facing is even though my project is private I am able to add my package to other project even without providing private-token.

I want to understand why it is not asking for private-token while fetching package ?

Is it possible that in those other projects maven is getting the artifact from your local cache?

Yes that’s what I thought at first but even after deleting all maven cache it does not ask for authentication.

Even I tried on different machine also but no success.