@vercel/otel - npm Package Compare versions

Comparing version 2.1.1 to 2.1.2

dist/types/semantic-resource-attributes.d.ts

@@ -11,5 +11,13 @@ export declare const HTTP_METHOD = "http.method";
 export declare const CLOUD_REGION = "cloud.region";
+/** @deprecated Use DEPLOYMENT_ENVIRONMENT_NAME instead. */
 export declare const DEPLOYMENT_ENVIRONMENT = "deployment.environment";
+export declare const DEPLOYMENT_ENVIRONMENT_NAME = "deployment.environment.name";
+export declare const DEPLOYMENT_ID = "deployment.id";
 export declare const CLOUD_PROVIDER = "cloud.provider";
 export declare const PROCESS_RUNTIME_NAME = "process.runtime.name";
+export declare const VCS_REF_HEAD_NAME = "vcs.ref.head.name";
+export declare const VCS_REF_HEAD_REVISION = "vcs.ref.head.revision";
+export declare const VCS_REPOSITORY_NAME = "vcs.repository.name";
+export declare const VCS_REPOSITORY_REF_REVISION = "vcs.repository.ref.revision";
+/** @deprecated Use VCS_REPOSITORY_REF_REVISION instead. */
 export declare const VCS_REPOSITORY_REF_VERSION = "vcs.repository.ref.revision";
@@ -16,0 +24,0 @@ export declare const FAAS_INVOKED_REGION = "faas.invoked_region";

dist/types/types.d.ts

@@ -32,2 +32,11 @@ import type { TextMapPropagator, ContextManager, TextMapGetter, Attributes } from "@opentelemetry/api";
      * - `node.env` - the value of `NODE_ENV` environment variable.
+     * - `deployment.environment.name` - the Vercel deployment environment.
+     * - `cloud.region` - the Vercel deployment region.
+     * - `process.runtime.name` - the runtime when the SDK can determine it, such as "nodejs" or "edge".
+     * - `vcs.ref.head.name` - the Vercel Git ref when available.
+     * - `vcs.ref.head.revision` - the Vercel Git SHA.
+     * - `vcs.repository.name` - the Vercel repository slug when available.
+     * - `deployment.id` - the Vercel deployment ID.
+     * - `service.version` - the Vercel deployment ID.
+     * - legacy compatibility aliases such as `env` and `vercel.*`.
      * - `env` - the Vercel deployment environment such as "production" or "preview" (`VERCEL_ENV` environment variable).
@@ -34,0 +43,0 @@ * - `vercel.region` - the Vercel deployment region (`VERCEL_REGION` environment variable).

dist/types/util/attributes.d.ts

@@ -1,1 +0,8 @@
-export {};
+/// <reference types="node" />
+import type { Attributes } from "@opentelemetry/api";
+export declare function getDefaultResourceAttributes({ attributes, env, runtime, serviceName, }: {
+    attributes?: Attributes;
+    env?: NodeJS.ProcessEnv;
+    runtime: string;
+    serviceName: string;
+}): Attributes;

package.json

 {
   "name": "@vercel/otel",
-  "version": "2.1.1",
+  "version": "2.1.2",
   "private": false,
@@ -5,0 +5,0 @@ "publishConfig": {

README.md

@@ -50,3 +50,3 @@ # 🚀 Vercel Otel
 - `serviceName`: The name of your service, used as the app name in many OpenTelemetry backends.
-- `attributes`: The resource attributes. By default, `@vercel/otel` configures relevant Vercel attributes based on [the environment](https://vercel.com/docs/projects/environment-variables/system-environment-variables), such as `env`, `vercel.runtime`, `vercel.host`, etc.
+- `attributes`: The resource attributes. By default, `@vercel/otel` configures standard OpenTelemetry resource attributes such as `deployment.environment.name`, `cloud.region`, `process.runtime.name`, `vcs.ref.head.name`, `vcs.ref.head.revision`, `vcs.repository.name`, and `deployment.id`, while keeping compatibility attributes such as `env`, `vercel.*`, `service.version`, and `vcs.repository.ref.revision`.
 - `instrumentations`: A set of instrumentations. By default, `@vercel/otel` configures "fetch" instrumentation.
@@ -53,0 +53,0 @@ - `instrumentationConfig`: Customize configuration for predefined instrumentations:

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 6 instances in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3261250

0.21%

Lines of code

2336

1.13%

Number of low supply chain risk alerts

57

-21.92%

No dependency changes