@sentry/integrations
The source project remains highly active, with 2,047 commits from 36 maintainers in three months and organization backing. GitHub workflows use broad app permissions and leave most action references unpinned, while the package has had no registry release for about 14 months.
73%
Total Score
100
100
95
83
50
Health Score Breakdown
No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent. This is a meaningful but non-severe gap because the package has strong organization backing and active source maintenance.
The package has 395 releases since March 2019, but none in the last 12 months and its latest registry release was about 14 months ago. Active repository work partly offsets this release-cadence concern.
The audit analyzed all 26 workflows with no failed files and found no untrusted checkout or script-injection paths. However, it reports high-confidence blanket GitHub App permissions, 145 of 164 action references unpinned, an archived action, and medium-confidence template-injection findings; the low-confidence cache findings are not weighted heavily.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 localforage Version ^1.8.1 | — | — |
@sentry/core Version 7.114.0 | — | — |
@sentry/types Version 7.114.0 | — | — |
@sentry/utils Version 7.114.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 7 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.