The Sentry Conventions are a set of semantic conventions for naming and describing events in Sentry.
The package exports:
attributes: contains constants for all attribute names and their types, as defined in the Sentry semantic conventions
attributes.ATTRIBUTE_METADATA: provides metadata about attributes, such as their type, scrubbing definition, deprecation info, and lookup keys
@sentry/conventions/attributes/search: contains constants and metadata for the names exposed in Sentry search
attributes.Attributes: represents a bag of typed attributes
op: contains constants for span operations used in Sentry
Attribute Key Chains
An attribute's value may be readable under several keys: its own, the names Sentry search exposes it as, and the deprecated attributes it replaces. ATTRIBUTE_METADATA[key].keys lists all of them, most preferred first:
the attribute heading the chain, followed by the names it is exposed as in Sentry search
its non-deprecated aliases, each followed by their own search names
the deprecated attributes it replaces, in alphabetical order, each followed by their own search names
Deprecated attributes are only added to a chain if their status is normalize or backfill.
If an attribute is deprecated with another status or status null, it's own keys array will not contain any
replacing attribute. Therefore, there's no guarantee for a stable attribute in a key chain.
The npm package @sentry/conventions receives a total of 10,486,212 weekly downloads. As such, @sentry/conventions popularity was classified as popular.
We found that @sentry/conventions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.It has 1 open source maintainer collaborating on the project.
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.