registry / @mastra/otel-exporter / 1.3.2

@mastra/otel-exporter@1.3.2

OpenTelemetry observability exporter for Mastra - supports OTLP traces and logs with multiple cloud providers

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 83.8 KB of source, external domains: api.lmnr.ai, api.traceloop.com, otlp.nr-data.net

Source & flagged code

1 flagged

dist/index.jsView file

Lines 37-77javascript

37 }

38};

39var cache = /* @__PURE__ */ new Map();

40async function loadExporter(protocol, provider) {

41 return loadSignalExporter("traces", protocol, provider);

42}

43async function loadSignalExporter(signal, protocol, provider) {

44 const spec = EXPORTER_SPECS[signal]?.[protocol];

45 if (!spec) {

46 if (protocol === "zipkin") {

47 console.warn(

48 `[OtelExporter] Zipkin does not support OTLP ${signal}. ${capitalize(signal)} export will be disabled.`

49 );

50 }

51 return null;

52 }

53 const cacheKey = `${signal}:${protocol}`;

54 if (cache.has(cacheKey)) {

55 return cache.get(cacheKey);

56 }

57 try {

58 const mod = await import(spec.pkg);

59 const ExporterClass = mod[spec.exportName];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L57

60 if (typeof ExporterClass !== "function") {

61 console.error(

62 `[OtelExporter] ${capitalize(signal)} ${protocol} exporter package "${spec.pkg}" did not expose a "${spec.exportName}" export. ${capitalize(signal)} export will be disabled.`

63 );

64 return null;

65 }

66 cache.set(cacheKey, ExporterClass);

67 return ExporterClass;

68 } catch {

69 const providerInfo = provider ? ` (required for ${provider})` : "";

70 const allPkgs = [spec.pkg, ...spec.extras ?? []].join(" ");

71 console.error(

72 `[OtelExporter] ${capitalize(signal)} ${protocol} exporter is not installed${providerInfo}.

73 Install the required package(s):

74 npm install ${allPkgs}`

75 );

76 return null;

77 }

Source & flagged code

1 flagged · loading source

dist/index.jsView file

57try { L58: const mod = await import(spec.pkg); L59: const ExporterClass = mod[spec.exportName];

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code