registry / autotel-drizzle / 0.0.47

autotel-drizzle@0.0.47

OpenTelemetry instrumentation for Drizzle ORM

Static Scan Results

scanned 27d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 2 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCrypto

Supply chain

Minified

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 30.4 KB of source

Source & flagged code

1 flagged

dist/drizzle-C2xv1qdm.jsView file

Lines 1-21javascript

1import { createHash } from "node:crypto";

2import { SpanKind, trace } from "@opentelemetry/api";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/drizzle-C2xv1qdm.jsView on unpkg · L1

3import { finalizeSpan, runWithSpan } from "autotel/trace-helpers";

4//#region src/common/constants.ts

5/**

6* OpenTelemetry semantic conventions for database operations.

7* These constants are shared across all plugins.

8*/

9const SEMATTRS_DB_SYSTEM = "db.system";

10const SEMATTRS_DB_SYSTEM_NAME = "db.system.name";

11const SEMATTRS_DB_OPERATION = "db.operation";

12const SEMATTRS_DB_STATEMENT = "db.statement";

13const SEMATTRS_DB_NAME = "db.name";

14const SEMATTRS_DB_NAMESPACE = "db.namespace";

15const SEMATTRS_DB_COLLECTION_NAME = "db.collection.name";

16const SEMATTRS_DB_OPERATION_NAME = "db.operation.name";

17const SEMATTRS_DB_QUERY_TEXT = "db.query.text";

18const SEMATTRS_DB_QUERY_SUMMARY = "db.query.summary";

19/**

20* sha1 hex of the (parameterised, sanitized) statement text. Use to group

21* identical queries in observability tools — the raw `db.statement` is

Source & flagged code

1 flagged · loading source

dist/drizzle-C2xv1qdm.jsView file

1import { createHash } from "node:crypto"; L2: import { SpanKind, trace } from "@opentelemetry/api";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code