The API credentials are hardcoded in the code which is not a very good security practice. A better approach would be:
- define a config file with the creds (cloudfoundry_config.properties) and load them in the code
- add an example config file with placeholders (cloudfoundry_config.example) for developers
- set the cloudfoundry_config.properties in .gitignore