User replays for Sentry
72%
Total Score
caution
Active, well-supported project, but this release is an internal library without a stable public API contract.
The published artifact includes a 1,400-character README, while repository tests, a changelog, and GitHub Releases are present. The README clearly says this is an internal Sentry library whose API may change without SemVer guarantees, which is a direct-dependency compatibility concern.
All 27 workflows were analyzed without file failures, and pull_request_target workflows had no untrusted checkouts or script-injection findings. However, 145 of 159 action references are unpinned, and high-confidence findings include broad GitHub App permissions plus an archived action, so workflow supply-chain hygiene is a real caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@sentry/core Version 11.8.0 | — | — |
@sentry/browser-utils Version 11.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.