I have a CLI package myapp published on a self-hosted GitLab Package Registry. The GitLab project hosting the package has Private visibility : you must authenticate to access the project's package ...

I am very confused about what the --index-strategy=unsafe-best-match flag really does and why it fails to install my packages: I install python packages in a sandboxed environment in CI pipelines ...