fix: skip validating package names outside of public registries

fix: skip validating package names outside of public registries #35