In Token Trader, you play as a PyPI package maintainer who has to navigate a network of OpenID Connect Identity Providers (IdPs) to obtain short-lived API tokens to be able to publish your package. To do this, you must trade tokens with other maintainers who have access to different IdPs, strategically choosing who to trade with to acquire the tokens you need. But be careful, not all trades are fair and some maintainers may have ulterior motives. Will you be a master trader and successfully publish your package, or will you get lost in the web of IdPs and run out of time?