Server Utilities for all Sentry JavaScript SDKs
78%
Total Score
healthy
Active organization-backed project with strong maintenance, but all workflow actions are unpinned and the repository does not name this package.
The repository name does not match this package and its README does not mention the package, so the linkage is less transparent; the package README nevertheless identifies it as a Sentry SDK internal library.
All 27 workflows were analyzed with no failed files or untrusted checkouts, but 145 of 159 action references are unpinned and high-confidence github-app findings report blanket installation permissions. Low-confidence cache-poisoning findings and an archived action add further workflow hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@sentry/core Version 11.8.0 | — | — |
@opentelemetry/api Version ^1.9.1 | — | — |
@sentry/conventions Version ^0.27.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.