@aws-sdk/credential-provider-env

AWS credential provider that sources credentials from known environment variables

@aws-sdk/credential-provider-env@3.972.78 was published on 2026-10-28. Its manifest declares 5 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=20.0.0.

All @aws-sdk/credential-provider-env versions · Permanent reference to 3.972.78

Package specifications

Version3.972.78
License declarationApache-2.0
Published2026-10-28T18:44:39.764Z
Node.js requirement>=20.0.0
Type declarationsBundled declarations
Runtime dependency count5
Peer requirement count0
Optional dependency count0
Minified sizeMeasurement not available yet
Minified + gzipMeasurement not available yet
Unpacked distribution size19.00 KiB
Published file count10
Package typeNot declared
ES module entry./dist-es/index.js
Default entry./dist-cjs/index.js
Side effects declarationfalse
Direct advisories0
Resolved graph dependenciesUnknown
Repository stars3675
Repository forks704

Install @aws-sdk/credential-provider-env 3.972.78

npm install @aws-sdk/credential-provider-env@3.972.78
pnpm add @aws-sdk/credential-provider-env@3.972.78
yarn add @aws-sdk/credential-provider-env@3.972.78

Runtime dependencies

Peer requirements

  • None declared

Optional dependencies

  • None declared

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review0/10 — Found 2/30 approved changesets -- score normalized to 0
Maintained10/10 — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow10/10 — no dangerous workflow patterns detected
Token-Permissions5/10 — detected GitHub workflow tokens with excessive permissions
License10/10 — license file detected
Signed-Releases0/10 — Project has not signed or included provenance with any releases.
Branch-Protection5/10 — branch protection is not maximal on development and all release branches
Security-Policy10/10 — security policy file detected
Packaging10/10 — packaging workflow detected
SAST10/10 — SAST tool is run on all commits
Binary-Artifacts9/10 — binaries present in source code
Pinned-Dependencies8/10 — dependency not pinned by hash detected -- score normalized to 8
Fuzzing10/10 — project is fuzzed

Evidence and freshness