
Research
/Security News
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
@opentelemetry/sql-common
Advanced tools
This is an internal utils package used for the different SQL instrumentations:
@opentelemetry/instrumentation is a core package for OpenTelemetry that provides a framework for instrumenting various libraries and frameworks. It is more general-purpose compared to @opentelemetry/sql-common, which is specifically focused on SQL databases.
Winston is a popular logging library for Node.js. While it is not specifically designed for telemetry, it can be used to log SQL queries and errors, providing some level of monitoring. However, it lacks the built-in context propagation and span creation features of @opentelemetry/sql-common.
Datadog is a comprehensive monitoring and analytics platform that offers SQL query monitoring as part of its APM (Application Performance Monitoring) suite. It provides more out-of-the-box features compared to @opentelemetry/sql-common but is a paid service.
FAQs
Utilities for SQL instrumentations
The npm package @opentelemetry/sql-common receives a total of 16,941,415 weekly downloads. As such, @opentelemetry/sql-common popularity was classified as popular.
We found that @opentelemetry/sql-common demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.

Security News
Socket found a malicious postinstall hook across 700+ GitHub repos, including PHP packages on Packagist and Node.js project repositories.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain