@sentry/core
Base implementation for all Sentry JavaScript SDKs
82%
Total Score
healthy
Active, well-backed project with strong release discipline, but workflow permissions and action pinning remain notable maintenance risks.
Health Score Breakdown
No build attestation or trusted-publisher provenance is present. This is a supply-chain transparency gap, although the package has strong repository activity and release documentation.
All 27 workflows were analyzed with no untrusted checkouts or script injections, but 145 of 164 action references are unpinned and high-confidence github-app findings report blanket app-token permissions. Low-confidence cache warnings and one archived action add hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @sentry/conventions Version ^0.26.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 8 years ago
- Unpacked Size
- 4.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.