
Security News
Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.
@opens/observability
Advanced tools
@opens/observability is a lightweight wrapper over popular instrumentation agents like Elasticsearch APM and OpenTelemetry. It provides a unified API to set up and use tracing, making it easier to integrate observability into your application.
npm install elastic-apm-node @opens/observability
You need to configure the observer before using it.
import { observer, TRACE_PROVIDER, LOG_LEVEL_TYPES } from "@opens/observability";
observer.setup({
  provider: TRACE_PROVIDER.APM, // Use TRACE_PROVIDER.OTEL for OpenTelemetry
  logLevel: LOG_LEVEL_TYPES.INFO, // Set log level (DEBUG, INFO, WARN, ERROR) - Optional
  config: {
    serviceName: "my-service",
    serverUrl: "http://localhost:8200", // Elastic APM Server URL,
    secretToken: '<secretToken from your Elastic Stack deployment>',
    environment: '...', // https://www.elastic.co/guide/en/apm/agent/nodejs/current/configuration.html#environment
  },
});
Wrap a function with tracing using instrumentFunc.
const tracedFunction = observer.tracer.instrumentFunc(
  { name: "fetchData", type: "custom" },
  async () => {
    console.log("Fetching data...");
    return "Data retrieved";
  }
);
tracedFunction().then(console.log);
TRACE_PROVIDERTRACE_PROVIDER.APM → Uses Elastic APM for tracing.TRACE_PROVIDER.OTEL → Uses OpenTelemetry for tracing.LOG_LEVEL_TYPESDEBUGINFOWARNERRORYou can pass a configuration object when setting up the tracer. The configuration varies depending on the provider:
{
  serviceName: "my-service",
  secretToken: "my-secret",
  serverUrl: "http://localhost:8200",
}
{
  resource: { serviceName: "my-otel-service" }
}
MIT
FAQs
A package for tracing node applications
The npm package @opens/observability receives a total of 58 weekly downloads. As such, @opens/observability popularity was classified as not popular.
We found that @opens/observability demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.

Security News
Ruby's creator Matz assumes control of RubyGems and Bundler repositories while former maintainers agree to step back and transfer all rights to end the dispute.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.