← Home

@opentelemetry/otlp-exporter-base

OpenTelemetry OTLP Exporter base (for internal use only)

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

dyladanpichlermarcoverbalancenpmjs-accounttrentmmartinkuba

Keywords

opentelemetrynodejstracingprofilingmetricsstatsmonitoring

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed from individual maintainer (dyladan) to GitHub Actions CI/CD with SLSA provenance attestation — a legitimate and expected transition for the official OpenTelemetry JS project. ai
provenance slsa-provenance AI (provenance): Package consistently publishes with SLSA provenance attestation via Sigstore; this is a stable positive signal for this package. ai

Versions (showing 51 of 68)

View all versions
Version Deps Published
0.221.0 2 / 20
0.220.0 2 / 20
0.219.0 2 / 20
0.218.0 2 / 20
0.217.0 2 / 20
0.216.0 2 / 20
0.215.0 2 / 20
0.214.0 2 / 20
0.213.0 2 / 20
0.212.0 2 / 20
0.211.0 2 / 20
0.210.0 2 / 20
0.209.0 2 / 20
0.208.0 2 / 20
0.207.0 2 / 20
0.206.0 2 / 20
0.205.0 2 / 21
0.204.0 2 / 21
0.203.0 2 / 22
0.202.0 2 / 22
0.201.1 2 / 22
0.201.0 2 / 22
0.200.0 2 / 22
0.57.2 2 / 23
0.57.1 2 / 23
0.57.0 2 / 23
0.56.0 2 / 23
0.55.0 2 / 23
0.54.2 2 / 23
0.54.1 2 / 23
0.54.0 2 / 23
0.53.0 2 / 24
0.52.1 2 / 25
0.52.0 2 / 25
0.51.1 1 / 25
0.51.0 1 / 25
0.50.0 1 / 25
0.49.1 1 / 25
0.49.0 1 / 25
0.48.0 1 / 25
0.47.0 1 / 24
0.46.0 1 / 24
0.45.1 1 / 24
0.45.0 1 / 24
0.44.0 1 / 24
0.43.0 1 / 24
0.42.0 1 / 24
0.41.2 1 / 24
0.41.1 1 / 24
0.41.0 2 / 15
0.40.0 1 / 13

v0.221.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.220.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.