Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@sentry/esbuild-plugin
Advanced tools
WARNING: This package is work in progress! Use with caution and do not yet use it in production. We're happy to receive your feedback!
A esbuild plugin that provides release management features for Sentry:
Every plugin takes an options argument with the following properties:
Option | Type | Required | Description |
---|---|---|---|
include | string | required | A path that the plugin should scan recursively for source maps. It will upload all .map files and match associated .js files. |
org | string | optional | The slug of the Sentry organization associated with the app. |
project | string | optional | The slug of the Sentry project associated with the app. |
authToken | string | optional | The authentication token to use for all communication with Sentry. Can be obtained from https://sentry.io/settings/account/api/auth-tokens/. Required scopes: project:releases (and org:read if setCommits option is used). |
url | string | optional | The base URL of your Sentry instance. Defaults to https://sentry.io/, which is the correct value for SAAS customers. |
release | string | optional | Unique identifier for the release. Defaults to automatically detected values for CI environments like Vercel, AWS, Heroku, CircleCI. If no such CI environment is detected, the plugin uses the git HEAD 's commit SHA. (For HEAD option, requires access to the git CLI). |
entries | (string | RegExp)[] | RegExp | string | function(absoluteFilePath: string): boolean | optional | Filter for entry points that should be processed. By default, the release will be injected into all entry points. |
ext | array | optional | The file extensions to be considered for the sourcemaps upload. By default the following file extensions are processed: js , map , jsbundle , and bundle . |
finalize | boolean | optional | Indicates whether Sentry release record should be automatically finalized (date_released timestamp added) after artifact upload. Defaults to true |
debug | boolean | optional | Print useful debug information. Defaults to false . |
cleanArtifacts | boolean | optional | Remove all existing artifacts in the Sentry release before uploading sourcemaps. Defaults to false . |
errorHandler | function(err: Error): void | optional | Function that is called when an error occurs during rlease creation or sourcemaps upload. When this function is provided, thrown errors will not cause the process to abort. If you still want to abort the process you can throw an error in the function. |
0.0.1-alpha.0
This release marks the first release of the Sentry bundler blugins. This is still a heavy work in progress and a lot of things are still missing and subject to change
FAQs
Official Sentry esbuild plugin
The npm package @sentry/esbuild-plugin receives a total of 75,369 weekly downloads. As such, @sentry/esbuild-plugin popularity was classified as popular.
We found that @sentry/esbuild-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.