Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@mastra/datadog@1.4.2: Clean npm security report (Allow) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 6 low-signal pattern(s) reviewed.

View on npm All versions

registry / @mastra/datadog / 1.4.2

@mastra/datadog@1.4.2

Datadog LLM Observability exporter for Mastra - exports tracing data to Datadog's LLM Observability product

AI Security Review

scanned 10d ago · by lpm-firewall-ai

This is a user-configured Datadog observability exporter. It can send runtime trace data to Datadog through dd-trace, but no malicious or install-time attack surface was confirmed.

Static reason

One or more suspicious static signals were detected.

Trigger

An application imports the package, creates a Datadog exporter with the required configuration, and emits tracing events.

Impact

Configured observability data may leave the application through the intended Datadog integration.

Mechanism

Formats Mastra spans and submits them to dd-trace LLM Observability.

Rationale

The flagged environment-variable and dependency-bridge signals are explained by the package's declared Datadog exporter purpose. Source inspection found no installation hooks or concrete malicious behavior.

Evidence

package.jsondist/index.jsREADME.md

Network endpoints1

datadoghq.com

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for block

The package can export configured application trace inputs and outputs through the Datadog tracing dependency.

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

A supplied Datadog API key and site are placed in process environment variables when the exporter is initialized.

Evidence against

package.json has no preinstall, install, postinstall, or other lifecycle hook.
The tracing exporter activates only when an application constructs it with required Datadog configuration.
No source use of filesystem APIs, child processes, shell execution, eval, or remote payload loading was found.
The dynamic import only loads its declared Mastra observability dependency for feature compatibility.

Behavioral surface

Source

EnvironmentVars

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 83.0 KB of source

Source & flagged code

3 flagged · loading source

dist/index.jsView file

2package = @mastra/datadog; repositoryIdentity = mastra; dependency = @mastra/observability L2: import { omitKeys } from "@mastra/core/utils"; L3: import { BaseExporter, getExternalParentId } from "@mastra/observability"; L4: import tracer from "dd-trace";

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L2

828if (span.input !== void 0) annotations.inputData = formatInput(span.input, span.type); if (span.output !== void 0) annotations.outputData = formatOutput(span.output, span.type);

Low

Suspicious Dependency Evidence

The package can export configured application trace inputs and outputs through the Datadog tracing dependency.

dist/index.jsView on unpkg · L828

111function ensureTracer(config) { if (tracerInitFlag.done) return; if (config.site) process.env.DD_SITE = config.site; if (config.apiKey) process.env.DD_API_KEY = config.apiKey; if (!tracer._tracer?.started) tracer.init({ service: config.service || config.mlApp, env: config.env || process.env.DD_ENV, plugins: config.integrationsEnabled ?? false }); tracer.llmobs.enable({ mlApp: config.mlApp, agentlessEnabled: config.agentless });

Low

Ai Review Evidence

A supplied Datadog API key and site are placed in process environment variables when the exporter is initialized.

dist/index.jsView on unpkg · L111

Findings

1 High2 Medium3 Low

HighCopied Package Dependency Bridgedist/index.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowSuspicious Dependency Evidencedist/index.js

LowAi Review Evidencedist/index.js

96%Pass

Verdict confidence

IntentBenign

False-positive riskLow

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

Maintainersabhiaiyer, smthomas, rase- +4

Version1.4.5

PublishedAug 26, 2026

LicenseApache-2.0

Dependencies5

Integrityverified

Package size133 KB

Files20

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → dist/index.jstypes → dist/index.d.tsexports map

Runtimenode >=22.13.0

Artifact585 KB · 20 files1 signature(s) · provenance

Install lifecycleNo install hooks · other: build, build:watch, lint, lint:fix +2

Behavioral surface

EnvironmentVarsSupply chain: cleanManifest: clean

LPM CLI

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-22javascript

1import { SpanType } from "@mastra/core/observability";

2import { omitKeys } from "@mastra/core/utils";

3import { BaseExporter, getExternalParentId } from "@mastra/observability";

4import tracer from "dd-trace";

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L2

5import { coreFeatures } from "@mastra/core/features";

6//#region src/features.ts

7/**

8* Feature detection for paired @mastra/core and @mastra/observability versions.

9*

10* `coreFeatures` is a hard peer dependency, so it can be imported statically.

11* `observabilityFeatures` is loaded via dynamic import so this exporter degrades

12* gracefully against older `@mastra/observability` versions that don't export it

13* (per the pattern documented in `observability/mastra/src/features.ts`).

14*

15* Detection runs once at module load. Callers consume the result through the

16* sync `isModelInferenceEnabled()` accessor, which conservatively returns

17* `false` until detection settles — long enough only to cover the microtask

18* window before any spans are emitted in practice.

19*/

20const FEATURE = "model-inference-span";

21let observabilityFeatures;

22let featureLoadPromise;

Lines 91-131javascript

91 [SpanType.PROVIDER_TOOL_CALL]: "tool",

92 [SpanType.WORKFLOW_RUN]: "workflow"

93};

94/**

95* Resolves the active span-type → Datadog kind mapping based on whether the

96* paired @mastra/core + @mastra/observability emit MODEL_INFERENCE spans.

97* Re-evaluated on each call so tests can flip the feature flag at runtime.

98*/

99function getSpanTypeToKind

Lines 808-848javascript

808 const state = this.getOrCreateTraceState(span.traceId);

809 if (span.isRootSpan) state.rootEnded = true;

810 state.buffer.set(span.id, span);

811 this.tryEmitReadySpans(span.traceId);

812

() {

100 return isModelInferenceEnabled() ? SPAN_TYPE_TO_KIND_INFERENCE : SPAN_TYPE_TO_KIND_LEGACY;

101}

102/**

103* Singleton flag to prevent multiple tracer initializations.

104* dd-trace should only be initialized once per process.

105*/

106const tracerInitFlag = { done: false };

107/**

108* Ensures dd-trace is initialized exactly once.

109* Respects any existing tracer initialization by the application.

110*/

111function ensureTracer(config) {

112 if (tracerInitFlag.done) return;

113 if (config.site) process.env.DD_SITE = config.site;

114 if (config.apiKey) process.env.DD_API_KEY = config.apiKey;

115 if (!tracer._tracer?.started) tracer.init({

116 service: config.service || config.mlApp,

117 env: config.env || process.env.DD_ENV,

118 plugins: config.integrationsEnabled ?? false

119 });

120 tracer.llmobs.enable({

121 mlApp: config.mlApp,

122 agentlessEnabled: config.agentless

Low

Ai Review Evidence

A supplied Datadog API key and site are placed in process environment variables when the exporter is initialized.

dist/index.jsView on unpkg · L111

123 });

124 tracerInitFlag.done = true;

125}

126/**

127* Returns the Datadog kind for a Mastra span type, using the mapping that

128* matches the active span hierarchy (legacy vs MODEL_INFERENCE).

129*/

130function kindFor(spanType) {

131 return getSpanTypeToKind()[spanType] || "task";

}

813 /**

814 * Sets native dd-trace error tags required by Datadog's Error Tracking UI.

815 */

816 setErrorTags(ddSpan, errorInfo) {

817 ddSpan.setTag("error", true);

818 ddSpan.setTag("error.message", errorInfo.message);

819 ddSpan.setTag("error.type", errorInfo.name ?? errorInfo.category ?? "Error");

820 if (errorInfo.stack) ddSpan.setTag("error.stack", errorInfo.stack);

821 }

822 /**

823 * Builds annotations object for llmobs.annotate().

824 * Uses dd-trace's expected property names: inputData, outputData, metadata, tags, metrics.

825 */

826 buildAnnotations(span) {

827 const annotations = {};

828 if (span.input !== void 0) annotations.inputData = formatInput(span.input, span.type);

829 if (span.output !== void 0) annotations.outputData = formatOutput(span.output, span.type);

Low

Suspicious Dependency Evidence

The package can export configured application trace inputs and outputs through the Datadog tracing dependency.

dist/index.jsView on unpkg · L828

830 const usageSpanType = isModelInferenceEnabled() ? SpanType.MODEL_INFERENCE : SpanType.MODEL_STEP;

831 if (span.type === usageSpanType) {

832 const usage = span.attributes?.usage;

833 const metrics = formatUsageMetrics(usage);

834 if (metrics) annotations.metrics = metrics;

835 }

836 const otherAttributes = omitKeys(span.attributes ?? {}, [

837 "usage",

838 "model",

839 "provider"

840 ]);

841 const contextKeySet = new Set(this.config.requestContextKeys ?? []);

842 const flatContextTags = {};

843 const remainingMetadata = {};

844 for (const [key, value] of Object.entries(span.metadata ?? {})) if (contextKeySet.has(key)) flatContextTags[key] = value;

845 else remainingMetadata[key] = value;

846 const remainingAttributes = {};

847 for (const [key, value] of Object.entries(otherAttributes)) if (contextKeySet.has(key)) {

848 if (!(key in flatContextTags)) flatContextTags[key] = value;