
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
opentelemetry-instrumentation-sinatra
Advanced tools
The Sinatra instrumentation is a community-maintained instrumentation for the Sinatra Web Framework.
Install the gem using:
gem install opentelemetry-instrumentation-sinatra
Or, if you use bundler, include opentelemetry-instrumentation-sinatra
to your Gemfile
.
Older versions of Sinatra depend on older version of Rack, which are not supported by the latest version of Rack instrumentation. If you are using an older version of Sinatra and need an earlier version of Rack instrumentation, then consider installing and pinning the compatible gem version, e.g.:
gem opentelemetry-instrumentation-rack, "<version>"
Sinatra Version | Rack Instrumentation Version |
---|---|
< 2.0 | = 0.22.1 |
>= 2.0 | ~> 0.22 |
To install the instrumentation, add the gem to your Gemfile:
gem 'opentelemetry-instrumentation-sinatra'
Then call use
with the name of the instrumentation:
require 'rubygems'
require 'bundler/setup'
Bundler.require
OpenTelemetry::SDK.configure do |c|
c.use 'OpenTelemetry::Instrumentation::Sinatra'
end
Alternatively, you can also call use_all
to install all the available instrumentation.
OpenTelemetry::SDK.configure do |c|
c.use_all
end
The opentelemetry-instrumentation-sinatra
gem source is on github, along with related gems including opentelemetry-api
and opentelemetry-sdk
.
The OpenTelemetry Ruby gems are maintained by the OpenTelemetry Ruby special interest group (SIG). You can get involved by joining us on our GitHub Discussions, Slack Channel or attending our weekly meeting. See the meeting calendar for dates and times. For more information on this and other language SIGs, see the OpenTelemetry community page.
The opentelemetry-instrumentation-sinatra
gem is distributed under the Apache 2.0 license. See LICENSE for more information.
In the OpenTelemetry ecosystem, HTTP semantic conventions have now reached a stable state. However, the initial Rack instrumentation was introduced before this stability was achieved, which resulted in HTTP attributes being based on an older version of the semantic conventions.
To facilitate the migration to stable semantic conventions, you can use the OTEL_SEMCONV_STABILITY_OPT_IN
environment variable. This variable allows you to opt-in to the new stable conventions, ensuring compatibility and future-proofing your instrumentation.
Sinatra instrumentation installs Rack middleware, but the middleware version it installs depends on which OTEL_SEMCONV_STABILITY_OPT_IN
environment variable is set.
When setting the value for OTEL_SEMCONV_STABILITY_OPT_IN
, you can specify which conventions you wish to adopt:
http
- Emits the stable HTTP and networking conventions and ceases emitting the old conventions previously emitted by the instrumentation.http/dup
- Emits both the old and stable HTTP and networking conventions, enabling a phased rollout of the stable semantic conventions.During the transition from old to stable conventions, Rack instrumentation code comes in three patch versions: dup
, old
, and stable
. These versions are identical except for the attributes they send. Any changes to Rack instrumentation should consider all three patches.
For additional information on migration, please refer to our documentation.
FAQs
Unknown package
We found that opentelemetry-instrumentation-sinatra demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.