Official Sentry SDK for React.js
86%
Total Score
healthy
Frequent releases and broad project activity support this package, but workflow permissions and unpinned actions reduce its margin.
All 27 workflows were analyzed with no failed files, and pull_request_target workflows have no untrusted checkouts or script-injection findings. However, 145 of 164 action uses are unpinned, several workflows expose blanket GitHub App permissions, and one archived action plus medium-confidence template-injection findings remain; the low-confidence cache findings are hygiene only.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@sentry/core Version 11.7.0 | — | — |
@sentry/browser Version 11.7.0 | — | — |
@sentry/conventions Version ^0.27.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.