🚀 Socket Launch Week Day 5:Introducing Repository Access Permissions and Custom Roles.Learn more
Sign In

@postman-cse/automation-telemetry-core

Package Overview
Dependencies
Maintainers
1
Versions
2
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@postman-cse/automation-telemetry-core

Shared anonymous usage telemetry for postman-actions: CI context, repo context, and the fire-and-forget event client.

latest
Source
npmnpm
Version
0.2.0
Version published
Maintainers
1
Created
Source

@postman-cse/automation-telemetry-core

Shared anonymous usage telemetry for the postman-actions suite. One source of truth for CI-system detection, repo/SCM detection, and the fire-and-forget event client; each action depends on this package and esbuild inlines it into the action's self-contained dist/.

What it sends

A single completion event per action run, after team_id resolves. Payload is account/CI-level only — no secrets, no spec content, no repo or org names in clear, no personal data:

FieldNotes
schema_versionwire contract version (currently 2)
action, action_version, outcome, tswhich action ran and how it finished
team_idPostman team id, sent clear (legitimate-interest basis)
ci_providerdetected CI system (11 named + other/unknown)
git_providergithub / gitlab / bitbucket / azure-devops / unknown
runner_kindhosted / self-hosted / unknown (where contractually known)
run_idCI run identifier
repo_idsha256(repo slug or url) — hashed, never clear
org_idsha256(owner) — hashed VCS org/group/workspace
account_typeservice / user / unknown (from session consumerType)
event_triggerpush / pull_request / schedule / manual / other / unknown (what kicked off the run)
runner_oslinux / macos / windows / unknown
ref_kinddefault-branch / branch / tag / unknown — coarsened; the raw branch/tag name is never sent

Usage

import { createTelemetryContext } from '@postman-cse/automation-telemetry-core';

const telemetry = createTelemetryContext({ action: 'postman-bootstrap-action' });
telemetry.setTeamId(teamId);
telemetry.setAccountType(sessionIdentity?.consumerType); // service/user/unknown
telemetry.emitCompletion('success');

action_version resolves from the consuming action's esbuild --define:__ACTION_VERSION__ automatically (override via the actionVersion option). Opt out with POSTMAN_ACTIONS_TELEMETRY=off or DO_NOT_TRACK=1. Corporate proxies are honored via HTTPS_PROXY/HTTP_PROXY/NO_PROXY.

Develop

npm test        # vitest
npm run typecheck
npm run lint
npm run build    # tsc -> dist (JS + .d.ts)

Keywords

postman

FAQs

Package last updated on 14 Jun 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts