registry / @mastra/datadog / 1.4.6
@mastra/datadog@1.4.6
Datadog LLM Observability exporter for Mastra - exports tracing data to Datadog's LLM Observability product
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is a conventional observability integration with no lifecycle execution or malicious primitives. Environment-variable use configures Datadog tracing only after the exporter is constructed.
Static reason
One or more suspicious static signals were detected.
Trigger
An application imports and constructs a Datadog exporter or bridge with valid Datadog configuration.
Impact
Application trace and model-span data may be exported to the configured Datadog service as intended.
Mechanism
User-configured Datadog LLM observability tracing.
AI rationale
This is a conventional observability integration with no lifecycle execution or malicious primitives. Environment-variable use configures Datadog tracing only after the exporter is constructed.
Network endpoints1
datadoghq.com
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hook and declares only Datadog and Mastra runtime dependencies.
- The entrypoint imports dd-trace and exports Datadog tracing exporter classes.
- The exporter requires an application name and, in agentless mode, an API key before enabling tracing.
- Runtime handling emits application spans through the Datadog tracer; this matches the package purpose.
Evidence against
- No child-process, shell, filesystem, eval, native-loading, or persistence code was found in the package artifacts.
- The dynamic import only loads the paired Mastra observability module for feature compatibility.
- No package source directly performs network requests or contains an opaque payload endpoint.
Behavioral surface
EnvironmentVars
Source & flagged code
6 flagged · loading sourcedist/index.jsView file
2package = @mastra/datadog; repositoryIdentity = mastra; dependency = @mastra/observability
L2: import { omitKeys } from "@mastra/core/utils";
L3: import { BaseExporter, getExternalParentId } from "@mastra/observability";
L4: import tracer from "dd-trace";
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/index.jsView on unpkg · L21import { SpanType } from "@mastra/core/observability";
import { omitKeys } from "@mastra/core/utils";
import { BaseExporter, getExternalParentId } from "@mastra/observability";
import tracer from "dd-trace";
import { coreFeatures } from "@mastra/core/features";
Low
Ai Review Evidence
The entrypoint imports dd-trace and exports Datadog tracing exporter classes.
dist/index.jsView on unpkg · L1724const mlApp = config.mlApp ?? process.env.DD_LLMOBS_ML_APP;
const apiKey = config.apiKey ?? process.env.DD_API_KEY;
const site = config.site ?? process.env.DD_SITE ?? "datadoghq.com";
const env = config.env ?? process.env.DD_ENV;
const envAgentless = process.env.DD_LLMOBS_AGENTLESS_ENABLED?.toLowerCase();
const agentless = config.agentless ?? (envAgentless === "false" || envAgentless === "0" ? false : true);
if (!mlApp) {
this.setDisabled(`Missing required mlApp. Set DD_LLMOBS_ML_APP environment variable or pass mlApp in config.`);
this.config = config;
return;
}
if
Findings
2 High2 Medium5 Low
HighCopied Package Dependency Bridgedist/index.js
HighSemantic Analysis Limitedpackage.json
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
Affected versions and remediation
This report applies to @mastra/datadog@1.4.6.
See all versions of @mastra/datadog for other recorded verdicts.
- Review the evidence and your use of @mastra/datadog@1.4.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.