Btw. it wasn't announce clearly before, but seanmcken's pm remembered me about it. Password-protecting the private repo is now useless - all the packages from it were already uploaded for public access in their own threads and/or uploaded to the main repo.

I think about discontinuing the private repo altogether. Is there any reason to keep it?