Can a github collaborator create package in Github package registry?

Question

I have a private github repository and in that repository there are some collaborators. They can't create new packages but they can publish to existing packages created by me as I'm the creator of the repository.

Is there any way that my collaborators will be able to create new packages and publish.

Answer 1

I was facing the same "create_package" permission issue. I think external collaborators were able to publish new packages in the past. But this no longer works.

Here's the response from GitHub's support team: "In order to publish an org scoped package, the actor performing the publish should be a member of the organization."

So the short answer to your question seems to be "no", at least for scoped packages (which it was for my case)

Answer 2

I have created a demo organization in my personal github account and transferred the ownership of one of my pet-project repositories to that organization.

After that I have added one of my colleagues as a member in my newly created demo organization and tried publishing an npm-package.

Voilà it worked, we were able to successfully publish an npm-package after being a member of the organiztion.