OpenTelemetry Exporter Prometheus provides a metrics endpoint for Prometheus
93%
Total Score
healthy
Active, well-backed release with strong build and workflow hygiene; experimental pre-1.0 status limits stability.
The linked repository is an organization monorepo and does not name this package in its README; the monorepo structure makes the name mismatch ordinary, but the missing README mention is a minor transparency gap.
Version 0.223.0 is not a stable major release, so semantic-versioning guarantees are limited and breaking changes remain more likely despite the active release cadence.
| Title | Versions | Severity |
|---|---|---|
CVE-2026-44902 @opentelemetry/exporter-prometheus is vulnerable to Improper Handling of Exceptional Conditions in versions 0.0.0 - 0.217.0. | 0.0.0 - 0.217.0 | High |
| Dependency | Last Release | Score |
|---|---|---|
@opentelemetry/core Version 2.12.0 | — | — |
@opentelemetry/resources Version 2.12.0 | — | — |
@opentelemetry/sdk-metrics Version 2.12.0 | — | — |
@opentelemetry/semantic-conventions Version ^1.29.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.