
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@effect/opentelemetry
Advanced tools
An OpenTelemetry integration for Effect. Exports Effect tracing, metrics, and logs through the OpenTelemetry SDK, with NodeSdk and WebSdk layers for easy setup.
npm install effect@rc @effect/opentelemetry@rc
The relevant @opentelemetry/* SDK packages are required as peer dependencies, depending on which features you use.
The vendor-neutral OpenTelemetry API for JavaScript, including tracing interfaces used to create and access spans. It is a lower-level general-purpose API; the package described here integrates telemetry with Effect programs and their runtime.
A Node.js SDK that configures OpenTelemetry providers, instrumentation, and exporters. It offers broader Node.js setup facilities, while the package described here is specifically designed to work with Effect and can use OpenTelemetry SDK components.
Sentry's OpenTelemetry integration for sending telemetry to Sentry and connecting tracing with Sentry features. It is oriented around Sentry as the observability destination; the package described here focuses on bridging Effect instrumentation to OpenTelemetry.
FAQs
OpenTelemetry integration for Effect
The npm package @effect/opentelemetry receives a total of 1,796,460 weekly downloads. As such, @effect/opentelemetry popularity was classified as popular.
We found that @effect/opentelemetry demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.