Sentry SDK integration for user feedback
67%
Total Score
caution
Usable with caveats: broad workflow token access and 145 of 164 actions are unpinned.
The artifact includes a README and this exact version has published release notes; repository tests and a changelog are also present. However, the README explicitly says the SDK is experimental and beta, with possible breaking changes or discontinuation.
The linked repository name does not match the package and its README does not mention the package, which leaves some uncertainty about package-to-repository mapping. The organization-backed monorepo context partly offsets that concern, but does not remove it.
All 26 workflows were analyzed, with no untrusted checkouts or script-injection findings, but 145 of 164 action references are unpinned and several high-confidence findings report blanket GitHub App permissions. These are meaningful supply-chain hygiene concerns, though the exposed workflows are not shown handling untrusted code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@sentry/core Version 10.57.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.