@sentry/node
Sentry Node SDK using OpenTelemetry for performance instrumentation
82%
Total Score
healthy
Strong maintenance and release transparency outweigh workflow hygiene concerns, including broad token access and 145 unpinned actions.
Health Score Breakdown
All 27 workflows were analyzed, with no untrusted checkouts or script-injection findings, but 145 of 164 action references are unpinned and several workflows expose broad app-token permissions; one archived action and medium-confidence template-injection findings add hygiene concerns. Low-confidence cache findings are not weighted heavily.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2025-65944 @sentry/node is vulnerable to Insertion of Sensitive Information Into Sent Data in versions 10.11.0 - 10.27.0. | 10.11.0 - 10.27.0 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @sentry/core Version 11.7.0 | — | — |
@opentelemetry/api Version ^1.9.1 | — | — |
@sentry/conventions Version ^0.27.0 | — | — |
@sentry/server-utils Version 11.7.0 | — | — |
@sentry/opentelemetry Version 11.7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 20 hours ago
- Created
- 8 years ago
- Unpacked Size
- 1.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.