Package public and private links
A package has both a public and a private link until the zipped file expires (aka, is “cleaned”).
If the package was created by a distribution, then the link on the Distribution page is the private link.
The private link is accessible by admin users only. The public link can be shared with third-parties.
Note: Both links will fail to work if the package is manually cleaned or if the package has expired The latter is dictated by “Package Cleanup Span” setting.