@opentelemetry/otlp-proto-exporter-base
OpenTelemetry OTLP-HTTP-protobuf Exporter base (for internal use only)
34
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
pichlermarcbogdandrutudyladan
Keywords
opentelemetrynodejsprotobuftracingprofilingmetricsstats
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@grpc/proto-loader | AI (phantom-deps): @grpc/proto-loader is declared for gRPC-based exporter consumers; indirect/conditional use in a base exporter package is expected. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New files are pre-generated protobuf definitions (root.js + sourcemaps for ESM/ESNext). This is expected for an OTLP protobuf exporter package and stable for this package. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase is due to bundled generated protobuf files (root.js ~700KB x2 builds + sourcemaps). Legitimate and expected for this package's purpose. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): The new dep (protobufjs) is the canonical protobuf library, directly aligned with this package's purpose as an OTLP protobuf exporter. Not a suspicious addition. | ai | |
| dependencies | unvetted-dep:protobufjs | AI (dependencies): protobufjs is the canonical JS protobuf library and a natural fit for an OTLP protobuf exporter package. Its use here is expected and legitimate. | ai | |
| provenance | publisher-changed | AI (provenance): pichlermarc is a well-established OpenTelemetry JS maintainer (1247 approved packages, 1073 days history). This is a legitimate project maintainer transition, not a compromise. | ai | |
| phantom-deps | phantom-dep:@opentelemetry/core | AI (phantom-deps): @opentelemetry/core is a legitimate same-org runtime dependency declared in package.json; phantom detection is a false positive for this monorepo package. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): pichlermarc is a core OpenTelemetry JS contributor with extensive track record. Addition is a legitimate maintainer transition within the official project. | ai |
Versions (showing 34 of 34)
| Version | Deps | Published |
|---|---|---|
| 0.51.1 | 3 / 16 | |
| 0.51.0 | 3 / 16 | |
| 0.50.0 | 3 / 16 | |
| 0.49.1 | 3 / 16 | |
| 0.49.0 | 3 / 16 | |
| 0.48.0 | 3 / 16 | |
| 0.47.0 | 3 / 15 | |
| 0.46.0 | 3 / 15 | |
| 0.45.1 | 3 / 15 | |
| 0.45.0 | 3 / 15 | |
| 0.44.0 | 3 / 15 | |
| 0.43.0 | 3 / 15 | |
| 0.42.0 | 3 / 15 | |
| 0.41.2 | 3 / 15 | |
| 0.41.1 | 3 / 15 | |
| 0.41.0 | 4 / 15 | |
| 0.40.0 | 3 / 13 | |
| 0.39.1 | 3 / 13 | |
| 0.39.0 | 3 / 13 | |
| 0.38.0 | 3 / 14 | |
| 0.37.0 | 3 / 14 | |
| 0.36.1 | 3 / 14 | |
| 0.36.0 | 3 / 14 | |
| 0.35.1 | 3 / 14 | |
| 0.35.0 | 3 / 14 | |
| 0.34.0 | 3 / 14 | |
| 0.33.0 | 4 / 14 | |
| 0.32.0 | 3 / 14 | |
| 0.31.0 | 3 / 14 | |
| 0.30.0 | 4 / 14 | |
| 0.29.2 | 4 / 14 | |
| 0.29.1 | 4 / 14 | |
| 0.29.0 | 4 / 14 | |
| 0.28.0 | 4 / 14 |