@mastra/datadog@1.4.5

Datadog LLM Observability exporter for Mastra - exports tracing data to Datadog's LLM Observability product

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The source is a conventional Datadog observability exporter with no install-time execution or concrete hostile behavior. The static environment-variable signal is explained by explicit Datadog configuration handling.

Static reason

One or more suspicious static signals were detected.

Trigger

An application imports the package and instantiates a Datadog exporter or bridge with Datadog configuration.

Impact

Application tracing data can be sent to the configured Datadog observability service.

Mechanism

Configured Datadog tracing export.

AI rationale

Network endpoints1

datadoghq.com

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The runtime exporter initializes dd-trace and enables Datadog LLM observability using supplied configuration.
The exporter submits completed tracing spans to the Datadog tracing library.

Evidence against

The manifest has no preinstall, install, or postinstall lifecycle hook.
No file-system access, shell execution, dynamic code evaluation, or unrelated network client appears in the inspected runtime bundles.
Environment variables are limited to Datadog configuration and API-key settings used by the configured exporter.

Behavioral surface

Source

EnvironmentVars

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 83.0 KB of source

Source & flagged code

5 flagged

dist/index.jsView file

Lines 1-22javascript

1import { SpanType } from "@mastra/core/observability";

2import { omitKeys } from "@mastra/core/utils";

3import { BaseExporter, getExternalParentId } from "@mastra/observability";

4import tracer from "dd-trace";

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L2

5import { coreFeatures } from "@mastra/core/features";

6//#region src/features.ts

7/**

8* Feature detection for paired @mastra/core and @mastra/observability versions.

10* `coreFeatures` is a hard peer dependency, so it can be imported statically.

11* `observabilityFeatures` is loaded via dynamic import so this exporter degrades

12* gracefully against older `@mastra/observability` versions that don't export it

13* (per the pattern documented in `observability/mastra/src/features.ts`).

14*

15* Detection runs once at module load. Callers consume the result through the

16* sync `isModelInferenceEnabled()` accessor, which conservatively returns

17* `false` until detection settles — long enough only to cover the microtask

18* window before any spans are emitted in practice.

19*/

20const FEATURE = "model-inference-span";

21let observabilityFeatures;

22let featureLoadPromise;

Lines 91-131javascript

91 [SpanType.PROVIDER_TOOL_CALL]: "tool",

92 [SpanType.WORKFLOW_RUN]: "workflow"

93};

94/**

95* Resolves the active span-type → Datadog kind mapping based on whether the

96* paired @mastra/core + @mastra/observability emit MODEL_INFERENCE spans.

97* Re-evaluated on each call so tests can flip the feature flag at runtime.

98*/

99function getSpanTypeToKind

Lines 1117-1154javascript

1117 userId: traceCtx.userId,

1118 startTime,

1119 ...kind === "llm" && attrs?.model ? { modelName: attrs.model } : {},

1120 ...kind === "llm" && attrs?.provider ? { modelProvider: attrs.provider }

package.jsonView file

Lines 1-21json

2 "name": "@mastra/datadog",

3 "version": "1.4.5",

4 "description": "Datadog LLM Observability exporter for Mastra - exports tracing data to Datadog's LLM Observability product",

5 "type": "module",

Source & flagged code

5 flagged · loading source

dist/index.jsView file

2package = @mastra/datadog; repositoryIdentity = mastra; dependency = @mastra/observability L2: import { omitKeys } from "@mastra/core/utils"; L3: import { BaseExporter, getExternalParentId } from "@mastra/observability"; L4: import tracer from "dd-trace";

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L2

111function ensureTracer(config) { if (tracerInitFlag.done) return; if (config.site) process.env.DD_SITE = config.site; if (config.apiKey) process.env.DD_API_KEY = config.apiKey; if (!tracer._tracer?.started) tracer.init({ service: config.service || config.mlApp, env: config.env || process.env.DD_ENV, plugins: config.integrationsEnabled ?? false }); tracer.llmobs.enable({ mlApp: config.mlApp, agentlessEnabled: config.agentless }); tracerInitFlag.done = true; }

Low

Ai Review Evidence

The runtime exporter initializes dd-trace and enables Datadog LLM observability using supplied configuration.

dist/index.jsView on unpkg · L111

1137tracer.llmobs.trace(traceOptions, (ddSpan) => { const annotations = this.buildAnnotations(span); if (Object.keys(annotations).length > 0) tracer.llmobs.annotate(ddSpan, annotations); if (span.errorInfo) this.setErrorTags(ddSpan, span.errorInfo); const exported = tracer.llmobs.exportSpan ? tracer.llmobs.exportSpan(ddSpan) : void 0; state.contexts.set(span.id, { ddSpan, exported }); for (const child of node.children) this.emitSpanTree(child, state, childInheritedModelAttrs); if (typeof ddSpan.finish === "function") ddSpan.finish(endTimeMs); });

Findings

2 High2 Medium4 Low

HighCopied Package Dependency Bridgedist/index.js

HighSemantic Analysis Limitedpackage.json

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowAi Review Evidencedist/index.js

LowAi Review Evidencepackage.json

Affected versions and remediation

This report applies to @mastra/datadog@1.4.5.

See all versions of @mastra/datadog for other recorded verdicts.

Review the evidence and your use of @mastra/datadog@1.4.5 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-14 07:53:11.494Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra

Source & flagged code