@aws-sdk/credential-provider-process
AWS credential provider that sources credential_process from ~/.aws/credentials and ~/.aws/config
100
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
amzn-ossaws-sdk-bot
Keywords
awscredentials
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:child-process-exec | AI (semgrep): This package's core purpose is executing a credential_process command from the user's AWS config. child_process.exec() is intentional and documented AWS SDK behavior, not a security risk. | ai | |
| phantom-deps | phantom-dep:@aws-sdk/shared-ini-file-loader | AI (phantom-deps): @aws-sdk/shared-ini-file-loader is a declared dependency in package.json and a legitimate sibling AWS SDK package; phantom-dep finding is a false positive here. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a declared runtime dependency used implicitly by compiled TypeScript output; this is a known false positive pattern for TypeScript packages. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process import is required for the credential_process feature; stable and expected for this package across all versions. | ai |
Versions (showing 100 of 284)
| Version | Deps | Published |
|---|---|---|
| 3.839.0 | 6 / 6 | |
| 3.835.0 | 6 / 6 | |
| 3.826.0 | 6 / 6 | |
| 3.825.0 | 6 / 6 | |
| 3.823.0 | 6 / 6 | |
| 3.821.0 | 6 / 6 | |
| 3.816.0 | 6 / 6 | |
| 3.812.0 | 6 / 6 | |
| 3.810.0 | 6 / 6 | |
| 3.808.0 | 6 / 6 | |
| 3.806.0 | 6 / 6 | |
| 3.804.0 | 6 / 6 | |
| 3.799.0 | 6 / 6 | |
| 3.798.0 | 6 / 6 | |
| 3.796.0 | 6 / 6 | |
| 3.775.0 | 6 / 6 | |
| 3.774.0 | 6 / 6 | |
| 3.758.0 | 6 / 6 | |
| 3.750.0 | 6 / 6 | |
| 3.749.0 | 6 / 6 | |
| 3.744.0 | 6 / 6 | |
| 3.734.0 | 6 / 6 | |
| 3.731.0 | 6 / 6 | |
| 3.730.0 | 6 / 6 | |
| 3.723.0 | 6 / 6 | |
| 3.716.0 | 6 / 6 | |
| 3.714.0 | 6 / 6 | |
| 3.713.0 | 6 / 6 | |
| 3.709.0 | 6 / 6 | |
| 3.696.0 | 6 / 6 | |
| 3.693.0 | 6 / 6 | |
| 3.692.0 | 6 / 6 | |
| 3.691.0 | 6 / 6 | |
| 3.686.0 | 6 / 6 | |
| 3.679.0 | 6 / 6 | |
| 3.678.0 | 6 / 6 | |
| 3.677.0 | 6 / 6 | |
| 3.667.0 | 6 / 6 | |
| 3.664.0 | 5 / 6 | |
| 3.662.0 | 5 / 6 | |
| 3.654.0 | 5 / 6 | |
| 3.649.0 | 5 / 6 | |
| 3.620.1 | 5 / 6 | |
| 3.614.0 | 5 / 6 | |
| 3.609.0 | 5 / 6 | |
| 3.598.0 | 5 / 6 | |
| 3.587.0 | 5 / 6 | |
| 3.577.0 | 5 / 6 | |
| 3.575.0 | 5 / 6 | |
| 3.572.0 | 5 / 6 | |
| 3.568.0 | 5 / 6 | |
| 3.567.0 | 5 / 6 | |
| 3.535.0 | 5 / 6 | |
| 3.533.0 | 5 / 6 | |
| 3.523.0 | 5 / 6 | |
| 3.521.0 | 5 / 6 | |
| 3.515.0 | 5 / 6 | |
| 3.511.0 | 5 / 6 | |
| 3.502.0 | 5 / 6 | |
| 3.496.0 | 5 / 6 | |
| 3.495.0 | 5 / 6 | |
| 3.489.0 | 5 / 6 | |
| 3.485.0 | 5 / 6 | |
| 3.468.0 | 5 / 6 | |
| 3.465.0 | 5 / 6 | |
| 3.460.0 | 5 / 7 | |
| 3.451.0 | 5 / 7 | |
| 3.449.0 | 5 / 7 | |
| 3.433.0 | 5 / 7 | |
| 3.428.0 | 5 / 7 | |
| 3.425.0 | 5 / 7 | |
| 3.418.0 | 5 / 7 | |
| 3.413.0 | 5 / 7 | |
| 3.410.0 | 5 / 7 | |
| 3.408.0 | 5 / 7 | |
| 3.405.0 | 5 / 7 | |
| 3.398.0 | 5 / 7 | |
| 3.391.0 | 5 / 7 | |
| 3.387.0 | 5 / 7 | |
| 3.378.0 | 5 / 7 | |
| 3.370.0 | 5 / 7 | |
| 3.369.0 | 5 / 7 | |
| 3.363.0 | 5 / 7 | |
| 3.357.0 | 4 / 7 | |
| 3.354.0 | 4 / 7 | |
| 3.353.0 | 4 / 7 | |
| 3.347.0 | 4 / 7 | |
| 3.342.0 | 4 / 7 | |
| 3.341.0 | 4 / 7 | |
| 3.338.0 | 4 / 7 | |
| 3.337.0 | 4 / 7 | |
| 3.329.0 | 4 / 7 | |
| 3.310.0 | 4 / 7 | |
| 3.306.0 | 4 / 7 | |
| 3.303.0 | 4 / 7 | |
| 3.300.0 | 4 / 7 | |
| 3.296.0 | 4 / 7 | |
| 3.295.0 | 4 / 7 | |
| 3.292.0 | 4 / 7 | |
| 3.290.0 | 4 / 7 |
Showing 100 of 284
Next page →