@mastra/sentry@1.2.28
Sentry AI observability exporter for Mastra
AI Security Review
scanned 2d ago · by lpm-firewall-aiSource inspection found a Sentry exporter with no package install hook and no independent attack behavior. Its telemetry requires a configured DSN and uses the expected Sentry APIs and observability dependencies.
Decision evidence
public snapshot- The manifest declares the Sentry and Mastra observability libraries as runtime dependencies and contains no install lifecycle hook.
- The exporter initializes Sentry only when constructed with a DSN from config or SENTRY_DSN; without one, it disables itself.
- The runtime forwards span and error data through Sentry APIs as an observability exporter. Inspected dependency excerpts show Sentry and OpenTelemetry instrumentation modules, constants, and utilities; they establish no separate attack behavior.
- Span events can include input, output, metadata, and error details, so configured Sentry telemetry may contain application or model data.
Source & flagged code
8 flagged · loading sourceThe manifest declares the Sentry and Mastra observability libraries as runtime dependencies and contains no install lifecycle hook.
package.jsonView on unpkg · L1The manifest declares the Sentry and Mastra observability libraries as runtime dependencies and contains no install lifecycle hook.
package.jsonView on unpkg · L25The manifest declares the Sentry and Mastra observability libraries as runtime dependencies and contains no install lifecycle hook.
package.jsonView on unpkg · L56Findings
Affected versions and remediation
This report applies to @mastra/sentry@1.2.28.
See all versions of @mastra/sentry for other recorded verdicts.
- Review the evidence and your use of @mastra/sentry@1.2.28 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.