Is it fine to console.log token?

I often see `npm set "//registry.npmjs.org/:_authToken" npm_f....` in js-docker-isolatin-provider logs when publishing by using npm-packager. User can accidentaly share their token. As I know other well known developers do not output tokens to console. Should we remove that console log?

Start by tracing the console output from js-docker-isolatin-provider during npm-packager publication and identify where the npm auth token is logged. Verify the change by publishing with a test token and confirming that the token no longer appears in the logs.

Written by the indexing model from the issue text.