
Security News
Open VSX Begins Implementing Pre-Publish Security Checks After Repeated Supply Chain Incidents
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.
@codefresh-io/cf-telemetry
Advanced tools
Base utils for monitoring.
Includes:
Add import '@codefresh-io/cf-telemetry/init' statement at the very beginning of the application lifecycle.
Please refer to the separate docs above for further configuration and usage details.
// index.ts
// ↓ Should be imported first
import '@codefresh-io/cf-telemetry/init'
// ↓ Keep one blank line below to prevent automatic import reordering
[!IMPORTANT] Please read this section carefully to understand how this library handles application lifecycle events and how it affects application lifecycle.
This library registers listeners for SIGINT, SIGTERM and beforeExit events to gracefully terminate instrumentation, which may include flushing logs, metrics, and profiles.
As this library registers listeners for SIGINT and SIGTERM events, Node.js' default handlers for such signals will be removed: Node.js will no longer exit on non-Windows platforms on such signals. More details in the doc.
Please make sure you add your own exit handlers for these signals.
None of the events above happens if proces.exit() is called directly. This means that if you call process.exit() in your application, the library will not be able to gracefully terminate instrumentation. This may lead to loss of logs, metrics, and other telemetry data.
Please ensure calling terminate() method of this library before calling process.exit() to ensure graceful termination of instrumentation.
import { terminate } from '@codefresh-io/cf-telemetry/init'
// ...your application logic
await terminate(); // Ensure graceful termination of instrumentation
process.exit(0); // Now it's safe to exit the process
| Variable | Required | Default value | Description |
|---|---|---|---|
CF_SERVICE_NAME | optional | unknown_service:node | Sets service name for OpenTelemetry, Pyroscope and Prometheus. |
CF_SERVICE_VERSION | optional | unknown | Sets service name for OpenTelemetry, Pyroscope and Prometheus. |
FAQs
Base utils for monitoring.
The npm package @codefresh-io/cf-telemetry receives a total of 2,906 weekly downloads. As such, @codefresh-io/cf-telemetry popularity was classified as popular.
We found that @codefresh-io/cf-telemetry demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 26 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.

Research
/Security News
Threat actors compromised four oorzc Open VSX extensions with more than 22,000 downloads, pushing malicious versions that install a staged loader, evade Russian-locale systems, pull C2 from Solana memos, and steal macOS credentials and wallets.

Security News
Lodash 4.17.23 marks a security reset, with maintainers rebuilding governance and infrastructure to support long-term, sustainable maintenance.