@sentry/core
Base implementation for all Sentry JavaScript SDKs
79%
Total Score
healthy
Frequent releases and broad maintenance offset workflow permission and action-pinning gaps.
Health Score Breakdown
No build attestation or trusted-publisher provenance is reported, leaving publication origin less transparent than an attested release. The package's long release history and active repository provide some compensating evidence.
All 27 workflows were analyzed with no untrusted checkouts or script-injection findings, but 145 of 164 action references are unpinned and several workflows expose blanket GitHub App permissions. Low-confidence cache findings and one archived action add hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @sentry/conventions Version ^0.27.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 8 years ago
- Unpacked Size
- 4.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.