Amateur operation
Packages should still be in beta too, unless you use/have a GitHub Personal Access Token you can't use packages as dependencies, even if the packages' project is public, because it blocks access to them with a 403. There is no option to allow artifacts to have anonymous access.
Yes it literally can't do the most basic thing it's major competitor Maven Central does. Nor does it mention this fact in any of their documentation.