createTemporaryNPMRC = ({ pathToPackage, root }) => {
  const NPMRCPathInPackage = path.join(pathToPackage, `.npmrc`)
  fs.outputFileSync(NPMRCPathInPackage, NPMRCContent)

  const NPMRCPathInRoot = path.join(root, `.npmrc`)
  fs.outputFileSync(NPMRCPathInRoot, NPMRCContent)

  return registerCleanupTask(() => {
    fs.removeSync(NPMRCPathInPackage)
    fs.removeSync(NPMRCPathInRoot)
  })
}
Anonymous publishing require dummy .npmrc
See https://github.com/verdaccio/verdaccio/issues/212#issuecomment-308578500
This is `npm publish` (as in linked comment) and `yarn publish` requirement.
This is not verdaccio restriction.