Cargo · crates.io

shohei

Credential file access: matched ".aws/"

Why PkgRadar flagged 2.5.1

Severity	Signal	Evidence
high	Credential file access	matched ".aws/" · shohei-2.5.1/src/api/supply_chain.rs

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2.5.1`	High risk	30	2026-06-14
`2.5.0`	High risk	30	2026-06-13
`2.4.1`	Review	5	2026-06-13
`2.4.0`	Review	5	2026-06-12
`0.5.1`	Low risk	0	2026-06-07
`0.5.0`	Low risk	0	2026-06-07
`0.4.1`	Low risk	0	2026-06-07

Block this in CI

PkgRadar gates shohei (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]