I am getting a 403 Forbidden - Permission permission_denied: read_package error when trying to install npm packages from GitHub Packages (e.g., @tazama-lf/audit-lib). How do I fix this?
I am getting a 403 Forbidden - Permission permission_denied: read_package error when trying to install npm packages from GitHub Packages (e.g., @tazama-lf/audit-lib). How do I fix this?
This error means your GitHub Personal Access Token (PAT) does not have the required read:packages scope, or you are not a member of the tazama-lf GitHub organization. To fix: (1) Go to https://github.com/settings/tokens and open your PAT. Verify that the read:packages scope is checked. (2) Ensure your .npmrc file is configured as: @tazama-lf:registry=https://npm.pkg.github.com and //npm.pkg.github.com/:_authToken=${GH_TOKEN}. (3) Install with: GH_TOKEN="your_token" npm install. If you still cannot access a package, verify at https://github.com/tazama-lf/audit-lib/pkgs/npm/audit-lib that you can see the package listing. If access is denied, request GitHub organization membership via support@tazama.org or in #get-help. Source: Tazama Product Owner, #get-help, July 2026.