If the packages live in private github repos, would it be possible to give the other company access to those repos (perhaps through a security token; I don’t know enough about github to figure out exactly how this might work)?
This is essentially the way I run my code on our HPC. Once the registry is installed on the HPC, I don’t need to distribute any code.