datadog-cdk-constructs-v2@5.2.0
⚠ Under reviewCDK Construct Library to automatically instrument Python and Node Lambda functions with Datadog using AWS CDK v2
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe inspected manifest has no install lifecycle hook, and the reviewed helper behavior aligns with configuring Datadog Lambda constructs. The required compressed Yarn state file could not be cited as printable UTF-8, so required clean citation coverage is incomplete and this review needs manual review.
Decision evidence
public snapshot- The manifest uses build and compile scripts, declares lib/index.js as its entry point, and contains no install lifecycle hook in the inspected scripts.
- The manifest lists aws-cdk-lib and constructs as peer dependencies and loglevel as its runtime dependency.
- The Git metadata helper reads the current commit and remote URL to populate source integration tags.
- The version file contains version 5.2.0.
Source & flagged code
7 flaggedPackage ships high-entropy non-source blobs.
.yarn/install-state.gzView on unpkgPackage hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
.yarn/install-state.gzView on unpkgPackage ships compressed or archive-like blobs.
.yarn/install-state.gzView on unpkgFindings
Affected versions and remediation
This report applies to datadog-cdk-constructs-v2@5.2.0.
See all versions of datadog-cdk-constructs-v2 for other recorded verdicts.
- Review the evidence and your use of datadog-cdk-constructs-v2@5.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.