Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@opentelemetry/node
Advanced tools
OpenTelemetry Node SDK provides automatic telemetry (tracing, metrics, etc) for Node.js applications
This module provides automated instrumentation and tracing for Node.js applications.
For manual instrumentation see the @opentelemetry/tracing package.
This package exposes a NodeTracer
that will automatically hook into the module loader of Node.js.
For this to work, please make sure that NodeTracer
is initialized before any other module of your application, (like http
or express
) is loaded.
OpenTelemetry comes with a growing number of instrumentation plugins for well know modules (see supported modules) and an API to create custom plugins (see the plugin developer guide).
Whenever a module is loaded NodeTracer
will check if a matching instrumentation plugin has been installed.
Please note: This module does not bundle any plugins. They need to be installed separately.
If the respective plugin was found, it will be used to patch the original module to add instrumentation code. This is done by wrapping all tracing-relevant functions.
This instrumentation code will automatically
In short, this means that this module will use provided plugins to automatically instrument your application to produce spans and provide end-to-end tracing by just adding a few lines of code.
Additionally to automated instrumentation, NodeTracer
exposes the same API as @opentelemetry/tracing, allowing creating custom spans if needed.
npm install --save @opentelemetry/core
npm install --save @opentelemetry/node
# Install instrumentation plugins
npm install --save @opentelemetry/plugin-http
npm install --save @opentelemetry/plugin-grpc
npm install --save @opentelemetry/plugin-https
The following code will configure the NodeTracer
to instrument http
using @opentelemetry/plugin-http
.
const opentelemetry = require('@opentelemetry/core');
const { NodeTracer } = require('@opentelemetry/node');
// Create and configure NodeTracer
const tracer = new NodeTracer({
plugins: {
http: {
enabled: true,
// You may use a package name or absolute path to the file.
path: '@opentelemetry/plugin-http',
// http plugin options
}
}
});
// Initialize the tracer
opentelemetry.initGlobalTracer(tracer);
// Your application code - http will automatically be instrumented if
// @opentelemetry/plugin-http is present
const http = require('http');
To enable instrumentation for all supported modules, create an instance of NodeTracer
without providing any plugin configuration to the constructor.
const opentelemetry = require('@opentelemetry/core');
const { NodeTracer } = require('@opentelemetry/node');
// Create and initialize NodeTracer
const tracer = new NodeTracer();
// Initialize the tracer
opentelemetry.initGlobalTracer(tracer);
// Your application code
// ...
See how to automatically instrument http and gRPC using node-sdk.
Apache 2.0 - See LICENSE for more information.
0.2.0
Released 2019-11-04
opentelemetry-shim-opentracing
, opentelemetry-tracing
, opentelemetry-types
opentelemetry-core
, opentelemetry-node
, opentelemetry-tracing
, opentelemetry-types
opentelemetry-metrics
opentelemetry-plugin-document-load
opentelemetry-core
, opentelemetry-plugin-document-load
, opentelemetry-tracing
, opentelemetry-web
opentelemetry-tracing
opentelemetry-core
opentelemetry-metrics
, opentelemetry-types
opentelemetry-metrics
opentelemetry-plugin-postgres
opentelemetry-core
, opentelemetry-types
opentelemetry-core
, opentelemetry-plugin-document-load
, opentelemetry-tracing
, opentelemetry-types
, opentelemetry-web
FAQs
OpenTelemetry Node SDK provides automatic telemetry (tracing, metrics, etc) for Node.js applications
The npm package @opentelemetry/node receives a total of 0 weekly downloads. As such, @opentelemetry/node popularity was classified as not popular.
We found that @opentelemetry/node demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.