OpenTelemetry instrumentation for `mongoose` database object data modeling (ODM) library for MongoDB
94%
Total Score
healthy
Frequent releases, active organization backing, and strong publishing and workflow hygiene indicate a well-maintained package.
The repository name does not match this package and its README does not mention the package, creating a minor transparency concern; the organization-backed monorepo context partly compensates for that mismatch.
Version 0.69.0 is not a stable major release, but it is not a prerelease and recent releases contain no prerelease versions, making this a modest maturity consideration rather than a health concern.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-931745 @opentelemetry/instrumentation-mongoose is vulnerable to Information Disclosure in versions 0.31.0 - 0.66.0. | 0.31.0 - 0.66.0 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
@opentelemetry/core Version ^2.9.0 | — | — |
@opentelemetry/instrumentation Version ^0.223.0 | — | — |
@opentelemetry/semantic-conventions Version ^1.33.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.