
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
opentracing-javascript
Advanced tools
This library is a JavaScript implementation of Open Tracing API intended for use both on the server and in the browser.
This library is a JavaScript implementation of Open Tracing API intended for use both on the server and in the browser.
Distributed tracing and context propagation have become important analysis tools for today's multi-layer distributed systems comprised of numerous micro-services implemented in different languages. The success of these tools is dependent on pervasive instrumentation of applications and libraries with trace context propagation support.
The OpenTracing project (http://opentracing.github.io) provides a multi-lingual standard for application-level instrumentation that's loosely coupled to any particular downstream tracing or monitoring system. In this way, adding or switching tracing implementations becomes a single-step code change.
In the current version, opentracing-javascript provides the core API and a default no-op implementation.
A reference implementation and a set of simple examples are planned.
See DEV.md for further development status and notes.
// TBD.
Trace is a virtual representation of the path a request takes through the layers and services of a (potentially distributed) system.
Span is a representation of any logical unit of work in the system. Spans can be nested and ordered to model parent-child and casual relationships. A Trace is tree of Spans.
TBD.
TBD.
npm publish
See DEV.md for additional detail.
FAQs
This library is a JavaScript implementation of Open Tracing API intended for use both on the server and in the browser.
The npm package opentracing-javascript receives a total of 1 weekly downloads. As such, opentracing-javascript popularity was classified as not popular.
We found that opentracing-javascript demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.