
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@elastic/opentelemetry-node
Advanced tools
Elastic Distribution of OpenTelemetry Node.js (EDOT Node.js)
The Elastic Distribution of OpenTelemetry Node.js (EDOT Node.js) is a lightweight wrapper around the OpenTelemetry SDK for Node.js that makes it easy to get started using OpenTelemetry in your Node.js applications, especially if you are using Elastic Observability as your observability solution.
# Install it
npm install --save @elastic/opentelemetry-node
# Configure it
export OTEL_EXPORTER_OTLP_ENDPOINT="...your-OTLP/collector-endpoint..."
export OTEL_EXPORTER_OTLP_HEADERS="Authorization=..."
export OTEL_SERVICE_NAME="my-app"
# Start it with your application
node --import @elastic/opentelemetry-node my-app.js
See the EDOT Node.js docs for details. Some direct links:
EDOT Node.js is very similar to the @opentelemetry/auto-instrumentations-node package from OpenTelemetry in its usage goal: a single-dependency that provides a simple path to zero-code instrumentation of Node.js applications. In general, Elastic's goal is to contribute all SDK improvements upstream. That said, there are sometimes differences that are specific to Elastic (e.g. talking to an Elastic service for central configuration, Elastic-authored additional instrumentations). Here is a concise list of differences:
telemetry.distro.* resource attributes to identify itself.@opentelemetry/auto-instrumentations-node: a subset of metrics from @opentelemetry/host-metrics.OTEL_SEMCONV_STABILITY_OPT_IN=http such that telemetry from the @opentelemetry/instrumentation-http package will use stable HTTP semantic conventions by default. Upstream OpenTelemetry JS has a tracking issue for the migration to newer HTTP semantic conventions in its instrumentations.OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE=delta, which differs from the upstream OpenTelemetry JS default of cumulative.ELASTIC_OTEL_NODE_ENABLE_LOG_SENDING=true environment variable. See the ELASTIC_OTEL_NODE_ENABLE_LOG_SENDING documentation for details.createAddHookMessageChannel feature for improved ESM support. We hope to upstream support for this.FAQs
Elastic Distribution of OpenTelemetry Node.js (EDOT Node.js)
The npm package @elastic/opentelemetry-node receives a total of 90,037 weekly downloads. As such, @elastic/opentelemetry-node popularity was classified as popular.
We found that @elastic/opentelemetry-node demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.