Is a project-level package registry containing a mix of public and private npm packages possible?

How to Use GitLab
,
1

Is a project-level package registry containing a mix of public and private npm packages possible?

I see instructions for setting up package registry, but to me it looks like access to the registry is configured to be the same as the project itself. Private project registry: packages can only be downloaded with auth, public registry: packages are publicly available to download without auth. But I would like a mix of public and private scoped packages.

Here are more specific questions I have:

  • Is a mix of scoped public and private packages even possible within the same project-level registry?
  • In a public project, will the package registry respect the npm publish options of access: public and access: restricted on a per package basis?
  • If a public project is in a private group with 2FA, does this complicate the situation?