Doubt regarding report

I got package.json directory which is publicly accessible and also contains GitHub internal repository link but I'm not able to access that repository as it requires authentication.

Should I consider reporting this?