@datadog/browser-rum
25
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
datadog
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:bundle/chunks/datadogProfiler-55d4e891080fef87fdc5-datadog-rum.js | AI (source-diff): Webpack-bundled build chunk, not obfuscation; standard for this SDK's build output. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogRecorder-9321ccd733832b530ee3-datadog-rum.js | AI (source-diff): Webpack-bundled build chunk, not obfuscation; standard for this SDK's build output. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogRecorder-87ca00224301a21205ff-datadog-rum.js | AI (source-diff): Webpack bundle chunk (minified build output), not obfuscation. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogProfiler-c42e8ab4311187695109-datadog-rum.js | AI (source-diff): Webpack bundle chunk (minified build output), not obfuscation. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogRecorder-6a16e6b24db688518b8f-datadog-rum.js | AI (source-diff): Webpack bundle chunk (minified build output), not obfuscation. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogProfiler-6137c052b602f06e143a-datadog-rum.js | AI (source-diff): Webpack bundle chunk (minified build output), not obfuscation; hash-named so filename varies per build. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogRecorder-a9c596a576daf366fb16-datadog-rum.js | AI (source-diff): Webpack-bundled chunk for browser SDK recorder; minification expected. | ai | |
| source-diff | obfuscated-file:esm/domain/deflate/deflateWorker.mjs | AI (source-diff): Inline deflate worker blob with pako compression; expected for this package. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogProfiler-f14f09035f28d255fba2-datadog-rum.js | AI (source-diff): Webpack-bundled chunk for browser SDK profiler; minification expected. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogProfiler-f630206577b7ecb32671-datadog-rum.js | AI (source-diff): Webpack-bundled chunk with readable identifiers; standard for browser SDK bundles. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogRecorder-9c7578c90e5543921bb6-datadog-rum.js | AI (source-diff): Webpack-bundled chunk with readable identifiers; standard for browser SDK bundles. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogRecorder-9be81a56cbb4556ddc67-datadog-rum.js | AI (source-diff): Webpack-bundled chunk with readable identifiers; standard for this browser SDK. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogProfiler-78ed247f92836525d58f-datadog-rum.js | AI (source-diff): Webpack-bundled chunk with readable identifiers; standard for this browser SDK. | ai | |
| source-diff | obfuscated-file:bundle/chunks/recorder-19282efda1d9e1eef3f9-datadog-rum.js | AI (source-diff): Webpack-minified bundle chunk; standard for this browser SDK package. | ai | |
| source-diff | obfuscated-file:bundle/chunks/profiler-bc30b320156fe69ea36e-datadog-rum.js | AI (source-diff): Webpack-minified bundle chunk; standard for this browser SDK package. | ai | |
| source-diff | net-exec-file:bundle/datadog-rum.js | AI (source-diff): RUM SDK uses fetch for telemetry; expected behavior. | ai | |
| source-diff | obfuscated-file:bundle/chunks/recorder-39406f3d442079d21cdf-datadog-rum.js | AI (source-diff): Standard webpack bundle output for browser SDK; stable pattern. | ai | |
| source-diff | obfuscated-file:bundle/chunks/profiler-9bd21f35a9cd65fa00e7-datadog-rum.js | AI (source-diff): Standard webpack bundle output for browser SDK; stable pattern. | ai | |
| source-diff | obfuscated-file:bundle/chunks/profiler-d23800d76b7e9a1ce188-datadog-rum.js | AI (source-diff): Webpack chunk bundle for browser SDK profiler; minified output is expected. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogProfiler-3b47f4371e6a567c5448-datadog-rum.js | AI (source-diff): Webpack-bundled browser SDK output; standard for this package. | ai | |
| source-diff | obfuscated-file:bundle/chunks/datadogRecorder-e89b0cb2cbbe9a504aca-datadog-rum.js | AI (source-diff): Webpack-bundled browser SDK output; standard for this package. | ai | |
| source-diff | obfuscated-file:bundle/datadog-rum.js | AI (source-diff): Main bundle file; minified output is expected for browser SDK. | ai | |
| source-diff | obfuscated-file:esm/domain/deflate/deflateWorker.js | AI (source-diff): Inline deflate worker blob; standard compression utility. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Major version bump; size increase consistent with new features. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Scoped Datadog package; missing description is cosmetic. | ai | |
| source-diff | obfuscated-file:bundle/chunks/recorder-0afe5efdaeff698f0452-datadog-rum.js | AI (source-diff): Webpack-bundled browser SDK chunk; minified output is expected for this package. | ai | |
| source-diff | obfuscated-file:bundle/chunks/profiler-19a87877d28040459dc4-datadog-rum.js | AI (source-diff): Webpack-bundled browser SDK chunk; minified output is expected for this package. | ai | |
| source-diff | obfuscated-file:bundle/chunks/recorder-5c776143985e64ec9945-datadog-rum.js | AI (source-diff): Webpack-chunked bundle output for Datadog browser SDK; stable pattern across versions. | ai | |
| source-diff | obfuscated-file:bundle/chunks/profiler-0bb56131347c1251d11e-datadog-rum.js | AI (source-diff): Webpack-chunked bundle output for Datadog browser SDK; stable pattern across versions. | ai | |
| source-diff | obfuscated-file:bundle/chunks/recorder-c03e8b7b19febac6d778-datadog-rum.js | AI (source-diff): Webpack-bundled browser SDK chunk; minified output is expected for this package. | ai | |
| source-diff | obfuscated-file:bundle/chunks/profiler-b4f10a6ea372978d5c54-datadog-rum.js | AI (source-diff): Webpack-bundled browser SDK chunk; minified output is expected for this package. | ai | |
| source-diff | obfuscated-file:bundle/chunks/recorder-dda69c261a4923f8ee06-datadog-rum.js | AI (source-diff): Webpack-bundled browser SDK chunk; minified output is expected for this package. | ai | |
| source-diff | obfuscated-file:bundle/chunks/profiler-e4aed81736e8868cb71c-datadog-rum.js | AI (source-diff): Webpack-bundled browser SDK chunk; minified output is expected for this package. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Version jump from 6.29→6.31 with restructured bundle chunks; normal for this package. | ai | |
| source-diff | obfuscated-file:bundle/chunks/recorder-926b641c6ef51d09a378-datadog-rum.js | AI (source-diff): Webpack-bundled browser chunk; minification is expected for this package's bundle output. | ai | |
| source-diff | obfuscated-file:bundle/chunks/profiler-9f1c1103f1ef0aa98257-datadog-rum.js | AI (source-diff): Webpack-bundled browser chunk; minification is expected for this package's bundle output. | ai | |
| dependencies | unvetted-dep:@datadog/browser-rum-core | AI (dependencies): First-party Datadog monorepo sibling package; always published in lockstep with this package. | ai |
Versions (showing 25 of 25)
| Version | Deps | Published |
|---|---|---|
| 7.6.1 | 3 / 2 | |
| 7.6.0 | 3 / 2 | |
| 7.5.0 | 3 / 3 | |
| 7.4.0 | 3 / 3 | |
| 7.3.0 | 3 / 2 | |
| 7.2.0 | 2 / 2 | |
| 7.1.0 | 2 / 2 | |
| 7.0.0 | 2 / 2 | |
| 6.33.0 | 2 / 2 | |
| 6.32.0 | 2 / 2 | |
| 6.31.0 | 2 / 2 | |
| 6.30.1 | 2 / 2 | |
| 6.29.0 | 2 / 2 | |
| 6.28.1 | 2 / 2 | |
| 6.28.0 | 2 / 2 | |
| 6.27.1 | 2 / 2 | |
| 6.27.0 | 2 / 2 | |
| 6.26.0 | 2 / 2 | |
| 6.25.4 | 2 / 2 | |
| 6.25.3 | 2 / 2 | |
| 6.25.2 | 2 / 2 | |
| 6.25.1 | 2 / 2 | |
| 6.25.0 | 2 / 2 | |
| 6.24.1 | 2 / 2 | |
| 6.24.0 | 2 / 2 |
v7.6.1
3 findings
HIGH
New obfuscated file: bundle/chunks/datadogProfiler-55d4e891080fef87fdc5-datadog-rum.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: bundle/chunks/datadogRecorder-9321ccd733832b530ee3-datadog-rum.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.6.0
3 findings
HIGH
New obfuscated file: bundle/chunks/datadogProfiler-c42e8ab4311187695109-datadog-rum.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: bundle/chunks/datadogRecorder-87ca00224301a21205ff-datadog-rum.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.5.0
3 findings
HIGH
New obfuscated file: bundle/chunks/datadogProfiler-6137c052b602f06e143a-datadog-rum.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: bundle/chunks/datadogRecorder-6a16e6b24db688518b8f-datadog-rum.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.