@mastra/datadog@1.4.10

Datadog LLM Observability exporter for Mastra - exports tracing data to Datadog's LLM Observability product

AI Security Review

scanned 15d ago · by lpm-firewall-ai

The inspected manifest and entrypoint show an ordinary Datadog observability exporter, with tracing configuration and span submission aligned to that purpose. Scanner hints about environment access and a dependency bridge are explained by this implementation; no malicious behavior was established.

Static reason

One or more suspicious static signals were detected.

Trigger

Construction of the Datadog bridge or exporter, followed by span export.

Impact

Expected telemetry delivery to the configured Datadog service; no unrelated recipient or malicious action was established.

Mechanism

Reads Datadog site, API key, service, and environment settings; configures `dd-trace` and forwards span annotations and data through its LLM observability interface.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json declares `dd-trace` and Mastra observability as runtime dependencies.
The bridge reads Datadog settings from its config or `DD_*` environment variables and initializes `dd-trace` when constructed.
On span export, the bridge submits span data through `tracer.llmobs.trace` and annotates the resulting Datadog span.
The event handler processes exported span events and returns early for disabled instances.

Evidence against

The manifest has no preinstall, install, or postinstall hook; the inspected behavior is a Datadog exporter path.
The observed environment variable access is tied to Datadog configuration, and no unrelated endpoint or credential forwarding was found in the inspected paths.

Behavioral surface

Source

EnvironmentVars

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 83.0 KB of source

Source & flagged code

5 flagged

dist/index.jsView file

Lines 1-22javascript

1import { SpanType } from "@mastra/core/observability";

2import { omitKeys } from "@mastra/core/utils";

3import { BaseExporter, getExternalParentId } from "@mastra/observability";

4import tracer from "dd-trace";

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L2

5import { coreFeatures } from "@mastra/core/features";

6//#region src/features.ts

7/**

8* Feature detection for paired @mastra/core and @mastra/observability versions.

10* `coreFeatures` is a hard peer dependency, so it can be imported statically.

11* `observabilityFeatures` is loaded via dynamic import so this exporter degrades

12* gracefully against older `@mastra/observability` versions that don't export it

13* (per the pattern documented in `observability/mastra/src/features.ts`).

14*

15* Detection runs once at module load. Callers consume the result through the

16* sync `isModelInferenceEnabled()` accessor, which conservatively returns

17* `false` until detection settles — long enough only to cover the microtask

18* window before any spans are emitted in practice.

19*/

20const FEATURE = "model-inference-span";

21let observabilityFeatures;

22let featureLoadPromise;

Lines 92-132javascript

92 [SpanType.WORKFLOW_RUN]: "workflow"

93};

94/**

95* Resolves the active span-type → Datadog kind mapping based on whether the

96* paired @mastra/core + @mastra/observability emit MODEL_INFERENCE spans.

97* Re-evaluated on each call so tests can flip the feature flag at runtime.

98*/

99function getSpanTypeToKind() {

100 return isModelInferenceEnabled

Lines 432-472javascript

432 this.logger.error("Datadog bridge: Failed to submit evaluation", {

433 error,

434 traceId: score.traceId,

435 spanId: score.spanId,

436 scorerId: score.scorerId

437 });

438 }

439 }

440 executeWithSpanContext(spanId, fn) {

441

Lines 1111-1151javascript

1111 const endTime = span.endTime ? toDate(span.endTime) : span.isEvent ? startTime : /* @__PURE__ */ new Date();

1112 return {

1113 traceOptions: {

1114

package.jsonView file

Lines 5-45json

5 "type": "module",

6 "main": "dist/index.js",

7 "types": "dist/index.d.ts",

8 "files": [

9 "dist"

10 ],

Source & flagged code

5 flagged · loading source

dist/index.jsView file

2package = @mastra/datadog; repositoryIdentity = mastra; dependency = @mastra/observability L2: import { omitKeys } from "@mastra/core/utils"; L3: import { BaseExporter, getExternalParentId } from "@mastra/observability"; L4: import tracer from "dd-trace";

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L2

112if (tracerInitFlag.done) return; if (config.site) process.env.DD_SITE = config.site; if (config.apiKey) process.env.DD_API_KEY = config.apiKey; if (!tracer._tracer?.started) tracer.init({ service: config.service || config.mlApp, env: config.env || process.env.DD_ENV, plugins: config.integrationsEnabled ?? false }); tracer.llmobs.enable({ mlApp:

Low

Ai Review Evidence

The bridge reads Datadog settings from its config or `DD_*` environment variables and initializes `dd-trace` when constructed.

dist/index.jsView on unpkg · L112

1131const span = node.span; const { traceOptions, endTimeMs } = this.buildSpanOptions(span, inheritedModelAttrs); const childInheritedModelAttrs = span.type === SpanType.MODEL_GENERATION ? { model: span.attributes?.model, provider: span.attributes?.provider } : inheritedModelAttrs; tracer.llmobs.trace(traceOptions, (ddSpan) => { const annotati

Findings

1 High2 Medium5 Low

HighCopied Package Dependency Bridgedist/index.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowSuspicious Dependency Evidencepackage.json

LowAi Review Evidencedist/index.js

Affected versions and remediation

This report applies to @mastra/datadog@1.4.10.

See all versions of @mastra/datadog for other recorded verdicts.

Review the evidence and your use of @mastra/datadog@1.4.10 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 20:29:03.828Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra

Source & flagged code