
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@sentry/conventions
Advanced tools
<source srcset="https://sentry-brand.storage.googleapis.com/sentry-logo-white.png" media="(prefers-color-scheme: dark)" /> <sour
The package exports:
attributes: contains constants for all attribute names and their types, as defined in the Sentry semantic conventionsattributes.ATTRIBUTE_METADATA: provides metadata about attributes, such as their type, scrubbing definition, deprecation info, and lookup keys@sentry/conventions/attributes/search: contains constants and metadata for the names exposed in Sentry searchattributes.Attributes: represents a bag of typed attributesop: contains constants for span operations used in SentryAn attribute's value may be readable under several keys: its own, the names Sentry search exposes it as, and the deprecated attributes it replaces. ATTRIBUTE_METADATA[key].keys lists all of them, most preferred first:
import { ATTRIBUTE_METADATA, HTTP_METHOD } from '@sentry/conventions/attributes';
ATTRIBUTE_METADATA[HTTP_METHOD].keys;
// ['http.request.method', 'http.method', 'http.request_method', 'method']
The order within a chain is:
Deprecated attributes are only added to a chain if their status is normalize or backfill.
If an attribute is deprecated with another status or status null, it's own keys array will not contain any
replacing attribute. Therefore, there's no guarantee for a stable attribute in a key chain.
FAQs
<source srcset="https://sentry-brand.storage.googleapis.com/sentry-logo-white.png" media="(prefers-color-scheme: dark)" /> <sour
The npm package @sentry/conventions receives a total of 10,354,780 weekly downloads. As such, @sentry/conventions popularity was classified as popular.
We found that @sentry/conventions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.