PyPI · pypi.org

truefoundry

Credential file access: matched "aws_access_key"

Why PkgRadar flagged 0.16.0rc1

Severity	Signal	Evidence
medium	Credential file access	matched "aws_access_key" · truefoundry-0.16.0rc1/truefoundry/deploy/builder/builders/tfy_spark_buildpack/tfy_execute_notebook.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.16.0rc1`	Review	10	2026-06-01
`0.15.4rc1`	Review	44	2026-05-27

Block this in CI

PkgRadar gates truefoundry (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi truefoundry==0.16.0rc1