
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@anthropic-ai/claude-trace
Advanced tools
A Node.js server that receives OpenTelemetry logs and traces via HTTP, organizing them by session and storing them locally.
npm install
npm start
The server will start on http://localhost:4318 (default OTEL collector port).
Set environment variables to customize the server:
PORT - Server port (default: 4318)Configure Claude Code to send logs to this server:
export ENABLE_ENHANCED_TELEMETRY_BETA=1
export OTEL_TRACES_EXPORTER=otlp
export OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4318
export OTEL_EXPORTER_OTLP_PROTOCOL=http/json
export OTEL_LOG_USER_PROMPTS=1
export OTEL_LOG_MODEL_RESPONSE=1
export OTEL_LOG_TOOL_CONTENT=1
Then run Claude Code normally:
claude --help
# Your commands here
Receive OTEL logs and store them organized by session.
Request:
{
"traceId": "abc123...",
"spanId": "def456...",
"resourceLogs": [...]
}
Response:
{
"status": "ok",
"sessionId": "abc123..."
}
Alternative endpoint for OTEL traces (same behavior as /v1/logs).
Health check endpoint.
Response:
{
"status": "ok",
"dataDir": "/path/to/data"
}
List all sessions with their metadata.
Response:
{
"sessions": [
{
"sessionId": "abc123...",
"lastUpdated": "2024-01-15T10:30:45.123Z",
"logCount": 42
}
]
}
Retrieve all logs for a specific session.
Response:
{
"sessionId": "abc123...",
"logs": [
{
"timestamp": "2024-01-15T10:30:45.123Z",
"traceId": "abc123...",
"spanId": "def456...",
"sessionId": "abc123...",
"content": {...}
}
]
}
Export all logs for a session as a JSON file.
Use the CLI viewer to browse stored logs:
# List all sessions
npm run view
# View session summary
npm run view view <sessionId>
# View raw session data as JSON
npm run view raw <sessionId>
Logs are stored in the data/ directory:
data/
├── session-1-abc123/
│ ├── logs.jsonl # All logs for this session (one JSON per line)
│ └── summary.json # Session metadata
├── session-2-def456/
│ ├── logs.jsonl
│ └── summary.json
└── ...
Each session directory contains:
logs.jsonl - JSONL format (one JSON object per line) for efficient streamingsummary.json - Metadata about the session# Start with auto-reload
npm run dev
# Build TypeScript
npm run build
The server automatically extracts session IDs from:
traceId field (primary identifier)resourceLogs[0].resource.attributes['session.id']resourceLogs[0].scopeLogs[0].logRecords[0].attributes['session.id']If no session ID is found, logs are stored under unknown/.
Start the server:
npm start
Configure Claude Code with environment variables (see above)
Run Claude Code normally:
claude your-command
View collected logs:
npm run view
npm run view view <sessionId>
Export for analysis:
curl -o session-data.json http://localhost:4318/sessions/<sessionId>/export
data/ directory automaticallyFAQs
OTEL trace viewer for Claude Code sessions
The npm package @anthropic-ai/claude-trace receives a total of 36 weekly downloads. As such, @anthropic-ai/claude-trace popularity was classified as not popular.
We found that @anthropic-ai/claude-trace demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 13 open source maintainers collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.