@tomerd @NeoNacho Ok, good to know that a future Xcode will read the netrc file. That's one of the requirements for downloading GitHub release assets in private repos, another one being following redirects.
It seems like SPM's HTTPClient.Request only accepts 200 as a valid response code and the GitHub REST API initially responds with a 302 when we ask it for a release asset (see my sample curl call above).
So is this a matter of adding 302 to the list of valid response codes or should the HTTP client be revised?