Is it currently supported to write component packages that can only be published for internal use within an organization? for example using our Github organization package library

Yes. There is no requirement that packages (component providers or custom resource providers) are public.