
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@sentry/conventions
Advanced tools
<source srcset="https://sentry-brand.storage.googleapis.com/sentry-logo-white.png" media="(prefers-color-scheme: dark)" /> <sour
The package exports:
attributes: contains constants for all attribute names and their types, as defined in the Sentry semantic conventionsattributes.ATTRIBUTE_METADATA: provides metadata about attributes, such as their type, scrubbing definition, deprecation info, and lookup keysattributes.Attributes: represents a bag of typed attributesop: contains constants for span operations used in SentryAn attribute's value may be readable under several keys: its own, the names Sentry search exposes it as, and the deprecated attributes it replaces. ATTRIBUTE_METADATA[key].keys lists all of them, most preferred first:
import { ATTRIBUTE_METADATA, HTTP_METHOD } from '@sentry/conventions/attributes';
ATTRIBUTE_METADATA[HTTP_METHOD].keys;
// ['http.request.method', 'http.method', 'http.request_method', 'method']
The order within a chain is:
Deprecated attributes are only added to a chain if their status is normalize or backfill.
If an attribute is deprecated with another status or status null, it's own keys array will not contain any
replacing attribute. Therefore, there's no guarantee for a stable attribute in a key chain.
FAQs
<source srcset="https://sentry-brand.storage.googleapis.com/sentry-logo-white.png" media="(prefers-color-scheme: dark)" /> <sour
The npm package @sentry/conventions receives a total of 10,745,039 weekly downloads. As such, @sentry/conventions popularity was classified as popular.
We found that @sentry/conventions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.