It's doable, and one very good option is Sonatype Nexus https://www.sonatype.com/download-oss-sonatype

The one issue I've seen over the years is it seems npm Inc does not officially sanction on site npm repos (presumably to help monetize their private hosted repos), and finding info on how to set up a private repo is lacking.