GitHub Packages feeds always need to be authenticated. This means if your feed is public you still have to authenticate on your development machine and build server just like you would if it was a private feed.
To setup the feed locally a Personal Access Token needs to be created with the repo and read:packages scopes.
If you're going to be publishing packages with this token you'll also need the write:packages scope.