“OpenTelemetry Host Metrics instrumentation for Node.js”
Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(CmOs₂Po)Md(Pa₄)
Referenced by 7 samples
- hostile github.com-urigo-accounter-fullstack-v0.0.0-20260803161836-0aaebfbb9565.zip fetched
- benign @malloy-publisher-server-0.0.231.tgz fetched
- benign github.com-bluesky-social-atproto-v0.0.0-20260814103623-0564468e3022.zip fetched
- benign github.com-lobehub-lobehub-v2.2.12-canary.8+incompatible.zip fetched
- hostile @super-oar-timeback-tracelog-0.12.1.tgz fetched
- benign github.com-grafana-docker-otel-lgtm-v0.30.1-0.20260801192741-cd9e33cf37ab.zip fetched
- hostile github.com-PostHog-posthog-v0.0.0-20260713173416-119816110897.zip fetched
Micro-behaviors
notable severity, 90% confident.
communications/http/url
References a public code-forge URL
notable severity, 95% confident.
os/sysinfo/performance
Reads Node.js process memory usage
notable severity, 85% confident.
process/interpreter
Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
component severity, 90% confident.
communications/url
JavaScript comment contains a URL
Metadata
notable severity, 85% confident.
package
Package declares a prepublish-only script
notable severity, 90% confident.
package/manifest
npm package is configured for public publishing
baseline severity, 90% confident.
build
Code has source map reference
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 70% confident.
import
Imports the Node.js os module
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 95% confident.
library
Contains bundled or minified JavaScript
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
File uses a source declaration extension
component severity, 95% confident.
package/files
Filename is package.json
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 5ed007f3440de6907ac3f0678b0ef76dad9fe9f3b7d377d447359fbf840758f1 |
|---|---|
| Canonical SHA-256 | 4faddda0e97c6903c74560dac3fcdb210095db1adeffa52aac7bebe46b4b6526 |
| Filename | [email protected] |
| Package | @opentelemetry/instrumentation-host-metrics |
| Version | 0.4.0 |
| PURL | pkg:npm/@opentelemetry/[email protected] |
Origin
| Source | forager |
|---|---|
| Feed | npmjs.org |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/@opentelemetry/instrumentation-host-metrics/-/instrumentation-host-metrics-0.4.0.tgz |
Timeline
| First seen | 23 Jul 2026 21:57 UTC |
|---|---|
| First analyzed | 23 Jul 2026 21:59 UTC |
| Last analyzed | 15 Aug 2026 14:47 UTC |
| Last updated | 15 Aug 2026 14:46 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | fb1c6 |
Not seeing what you expected? Let us know