PyPI · pypi.org

powermem

Credential file access: matched "aws_access_key"

Why PkgRadar flagged 1.1.3

Severity	Signal	Evidence
medium	Credential file access	matched "aws_access_key" · powermem-1.1.3/src/powermem/integrations/embeddings/aws_bedrock.py
medium	Credential file access	matched "GOOGLE_APPLICATION_CREDENTIALS" · powermem-1.1.3/src/powermem/integrations/embeddings/vertexai.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.1.3`	Review	17	2026-06-08
`1.1.2`	Review	17	2026-06-08
`1.1.1`	Review	17	2026-06-08

Block this in CI

PkgRadar gates powermem (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi powermem==1.1.3