GitHub access token with read-only access to private repositories : <p>I have a project with a Node dependency on a private Git repository. I need to be able to run <code>npm install</code> without being prompted to enter a password or allow an SSH connection, so I'm using an access token that I created on GitHub in my package.json:</p>

<pre><code>  "dependencies": {
    "sass-theme": "git+https://[token]:x-oauth-basic@github.com/MyOrg/sass-theme.git#v1.0.2",
    "node-sass": "^4.5.0"
  }
</code></pre>

<p>This project is shared with dozens of other people, so obviously I don't want to keep my token in source control. I know I can create a read-only deployment key on GitHub, but I believe that would require other developers to import the SSH key to build the project locally.</p>

<p>Is it possible to create an access token that can be shared but that has read-only access to clone the repository?</p>
