
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
telempack
Advanced tools
A package that uses the OpenTelemetry & Datadog API/SDK to obtain traces, logs, & metrics from services.
This current version only supports open telemetry exporting. There are two objects (Resource & Observer) that you will import from telempack. First fill out the parameters for the Resource object then instantiate an Observer object passing through one paramater - the Resource object. Note that prod is the only environment that will export data to datadog. That's it. For an example, look in telempack/examples/example-telempack.py
You can install this package via pip xor poetry.
If your service primarily uses pip, then check out eog's piphub. Inside the simple index you can find "telempack" which is this package. To install with pip, run this command (note the whitespace):
pip install --index-url http://piphub.eogresources.com/simple/ telempackIn order to install this package from eog's internal pypi server please run these commands in order (note in config command you can replace '.eog' with a tag of your choice but you have to replace it in the next command too):
poetry config repositories.eog https://piphub.eogresources.com/simple/poetry add telempack --source eogAnd to update the package:
poetry update telempackBe sure to instantiate the Observer and create the Resource in the same area you add your middleware and routes (preferably before both & after app instantiation). See example-telempack.py in telempack/examples/example-telempack.py Run script:
python -m telempack.examples.example-telempack
The export_endpoint link will change and your team will have a specific link. Hardcoding each link for traces, metrics, and logs is okay but not recommended; instead try adding it to your environment variables.
FAQs
A package that uses the OpenTelemetry & Datadog API/SDK to obtain traces, logs, & metrics from services.
We found that telempack demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.