Clear documentation, current releases, and broad contributor activity support dependable maintenance. Build provenance, read-only workflow permissions, pinned actions, and security tooling further reduce adoption concerns.
91%
Total Score
100
100
89
100
100
The linked repository is a monorepo whose name does not match this package and whose README does not mention it, creating some uncertainty about package-to-repository mapping; the organization backing and broader repository evidence partly compensate.
Version 0.70.0 is not a stable major release, but it is not a prerelease and recent releases contain no prerelease versions, making this a minor maturity consideration rather than a major concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@opentelemetry/core Version ^2.9.0 | — | — |
@opentelemetry/instrumentation Version ^0.222.0 | — | — |
@opentelemetry/semantic-conventions Version ^1.27.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.