All @datadog/datadog-ci-plugin-cloud-run versions
@datadog/datadog-ci-plugin-cloud-run @4.1.2
rejected
This version was rejected.
It did not pass GreenFlagged's security review and is not served by the registry.
The findings and risk dispositions below explain why.
50
Risk Score
Apache-2.0
License
No
Install Scripts
9
Dependencies
0
Dev Dependencies
33.9 KB
Package Size
Published
Datadog CI plugin for `cloud-run` commands
Maintainers
datadog
Keywords
datadogdatadog-ciplugin
Dependencies (9)
| Package | Constraint | Registry Status |
|---|---|---|
| ora | 5.4.1 | auto_approved |
| chalk | 3.0.0 | auto_approved |
| upath | ^2.0.1 | auto_approved |
| inquirer | ^8.2.5 | auto_approved |
| jest-diff | ^30.0.4 | auto_approved |
| @google-cloud/run | ^3.0.0 | auto_approved |
| google-auth-library | ^10.2.1 | auto_approved |
| @google-cloud/logging | ^11.2.0 | auto_approved |
| inquirer-checkbox-plus-prompt | ^1.4.2 | auto_approved |
Transitive Dependency Tree
189 transitive deps
max depth 10
├─
@google-cloud/logging
^11.2.0
→ 11.2.1
├─
@google-cloud/run
^3.0.0
→ 3.2.0
├─
chalk
3.0.0
→ 3.0.0
├─
google-auth-library
^10.2.1
→ 10.6.2
├─
inquirer
^8.2.5
→ 8.2.7
├─
inquirer-checkbox-plus-prompt
^1.4.2
→ 1.4.2
├─
jest-diff
^30.0.4
→ 30.3.0
├─
ora
5.4.1
→ 5.4.1
├─
upath
^2.0.1
→ 2.0.1
├─
@google-cloud/common
^5.0.0
→ 5.0.2
├─
@google-cloud/paginator
^5.0.0
→ 5.0.2
├─
@google-cloud/projectify
^4.0.0
→ 4.0.0
├─
@google-cloud/promisify
4.0.0
→ 4.0.0
├─
@inquirer/external-editor
^1.0.0
→ 1.0.3
├─
@jest/diff-sequences
30.3.0
→ 30.3.0
├─
@jest/get-type
30.1.0
→ 30.1.0
├─
@opentelemetry/api
^1.7.0
→ 1.9.1
├─
ansi-escapes
^4.2.1
→ 4.3.2
├─
ansi-styles
^4.1.0
→ 4.3.0
├─
arrify
^2.0.1
→ 2.0.1
├─
base64-js
^1.3.0
→ 1.5.1
├─
bl
^4.1.0
→ 4.1.0
├─
chalk
^4.1.2
→ 4.1.2
├─
chalk
4.1.2
→ 4.1.2
├─
chalk
^4.1.1
→ 4.1.2
├─
chalk
^4.1.0
→ 4.1.2
├─
cli-cursor
^3.1.0
├─
cli-cursor
^3.1.0
→ 3.1.0
├─
cli-spinners
^2.5.0
→ 2.9.2
├─
cli-width
^3.0.0
├─
dot-prop
^6.0.0
→ 6.0.1
├─
ecdsa-sig-formatter
^1.0.11
→ 1.0.11
├─
extend
^3.0.2
→ 3.0.2
├─
figures
^3.0.0
→ 3.2.0
├─
gaxios
^7.1.4
→ 7.1.4
├─
gcp-metadata
^6.0.0
→ 6.1.1
├─
gcp-metadata
8.1.2
→ 8.1.2
├─
google-auth-library
^9.0.0
→ 9.15.1
├─
google-gax
^4.0.3
→ 4.3.5
├─
google-gax
^5.0.0
→ 5.0.6
├─
google-logging-utils
1.1.3
→ 1.1.3
├─
is-interactive
^1.0.0
├─
is-unicode-supported
^0.1.0
→ 0.1.0
├─
jws
^4.0.0
→ 4.0.1
├─
lodash
^4.17.21
→ 4.18.1
├─
lodash
^4.17.5
→ 4.18.1
├─
log-symbols
^4.1.0
→ 4.1.0
├─
mute-stream
0.0.8
→ 0.0.8
├─
on-finished
^2.3.0
→ 2.4.1
├─
ora
^5.4.1
→ 5.4.1
├─
pretty-format
30.3.0
→ 30.3.0
├─
pumpify
^2.0.1
→ 2.0.1
├─
run-async
^2.4.0
├─
rxjs
^6.6.7
→ 6.6.7
├─
rxjs
^7.5.5
→ 7.8.2
├─
stream-events
^1.0.5
→ 1.0.5
├─
string-width
^4.1.0
→ 4.2.3
├─
strip-ansi
^6.0.0
→ 6.0.1
├─
supports-color
^7.1.0
→ 7.2.0
├─
through
^2.3.6
→ 2.3.8
├─
uuid
^9.0.0
→ 9.0.1
├─
wcwidth
^1.0.1
→ 1.0.1
├─
wrap-ansi
^6.0.1
→ 6.2.0
├─
@google-cloud/projectify
^4.0.0
→ 4.0.0
├─
@google-cloud/promisify
^4.0.0
→ 4.1.0
├─
@grpc/grpc-js
^1.12.6
→ 1.14.4
├─
@grpc/grpc-js
~1.10.3
→ 1.10.12
├─
@grpc/proto-loader
^0.8.0
→ 0.8.0
├─
@grpc/proto-loader
^0.7.0
→ 0.7.15
├─
@jest/schemas
30.0.5
→ 30.0.5
├─
@types/long
^4.0.0
├─
abort-controller
^3.0.0
→ 3.0.0
├─
ansi-regex
^5.0.1
→ 5.0.1
├─
ansi-styles
^5.2.0
→ 5.2.0
├─
ansi-styles
^4.0.0
→ 4.3.0
├─
ansi-styles
^4.1.0
→ 4.3.0
├─
arrify
^2.0.1
→ 2.0.1
├─
arrify
^2.0.0
→ 2.0.1
├─
base64-js
^1.3.0
→ 1.5.1
├─
bl
^4.1.0
→ 4.1.0
├─
buffer
^5.5.0
→ 5.7.1
├─
chalk
^4.1.0
→ 4.1.2
├─
chardet
^2.1.1
→ 2.1.1
├─
cli-cursor
^3.1.0
├─
cli-spinners
^2.5.0
→ 2.9.2
├─
color-convert
^2.0.1
├─
defaults
^1.0.3
→ 1.0.4
├─
duplexify
^4.1.3
→ 4.1.3
├─
duplexify
^4.0.0
→ 4.1.3
├─
duplexify
^4.1.1
→ 4.1.3
├─
ecdsa-sig-formatter
^1.0.11
→ 1.0.11
├─
ee-first
1.1.1
→ 1.1.1
├─
emoji-regex
^8.0.0
├─
escape-string-regexp
^1.0.5
→ 1.0.5
├─
extend
^3.0.2
→ 3.0.2
├─
gaxios
^6.1.1
→ 6.7.1
├─
gaxios
^7.0.0
→ 7.1.4
├─
gcp-metadata
^6.1.0
→ 6.1.1
├─
google-auth-library
^10.1.0
→ 10.6.2
├─
google-auth-library
^9.0.0
→ 9.15.1
├─
google-auth-library
^9.3.0
→ 9.15.1
├─
google-logging-utils
^1.1.1
→ 1.1.3
├─
google-logging-utils
^0.0.2
→ 0.0.2
├─
google-logging-utils
^1.0.0
→ 1.1.3
├─
gtoken
^7.0.0
→ 7.1.0
├─
has-flag
^4.0.0
→ 4.0.0
├─
html-entities
^2.5.2
→ 2.6.0
├─
https-proxy-agent
^7.0.1
→ 7.0.6
├─
iconv-lite
^0.7.0
→ 0.7.2
├─
inherits
^2.0.4
→ 2.0.4
├─
inherits
^2.0.3
→ 2.0.4
├─
is-fullwidth-code-point
^3.0.0
├─
is-interactive
^1.0.0
├─
is-obj
^2.0.0
├─
is-unicode-supported
^0.1.0
→ 0.1.0
├─
json-bigint
^1.0.0
→ 1.0.0
├─
jwa
^2.0.1
→ 2.0.1
├─
jws
^4.0.0
→ 4.0.1
├─
log-symbols
^4.1.0
→ 4.1.0
├─
node-fetch
^3.3.2
→ 3.3.2
├─
node-fetch
^2.6.1
→ 2.6.13
├─
object-hash
^3.0.0
→ 3.0.0
├─
proto3-json-serializer
^2.0.0
→ 2.0.2
├─
protobufjs
7.3.0
├─
protobufjs
^7.5.3
→ 7.6.1
├─
pump
^3.0.0
→ 3.0.4
├─
react-is
^18.3.1
→ 18.3.1
├─
readable-stream
^3.4.0
→ 3.6.2
├─
restore-cursor
^3.1.0
→ 3.1.0
├─
retry-request
^7.0.0
→ 7.0.1
├─
retry-request
^8.0.0
→ 8.0.2
├─
rimraf
^5.0.1
→ 5.0.10
├─
safe-buffer
^5.0.1
→ 5.2.1
├─
string-width
^4.1.0
→ 4.2.3
├─
strip-ansi
^6.0.1
→ 6.0.1
├─
strip-ansi
^6.0.0
→ 6.0.1
├─
stubs
^3.0.0
→ 3.0.0
├─
supports-color
^7.1.0
→ 7.2.0
├─
teeny-request
^9.0.0
→ 9.0.0
├─
tslib
^2.1.0
→ 2.8.1
├─
tslib
^1.9.0
→ 1.14.1
├─
type-fest
^0.21.3
→ 0.21.3
├─
uuid
^9.0.1
→ 9.0.1
├─
wcwidth
^1.0.1
→ 1.0.1
├─
@grpc/proto-loader
^0.7.13
→ 0.7.15
├─
@grpc/proto-loader
^0.8.0
→ 0.8.1
├─
@js-sdsl/ordered-map
^4.4.2
→ 4.4.2
├─
@protobufjs/aspromise
^1.1.2
→ 1.1.2
├─
@protobufjs/base64
^1.1.2
→ 1.1.2
├─
@protobufjs/codegen
^2.0.5
→ 2.0.5
├─
@protobufjs/eventemitter
^1.1.1
→ 1.1.1
├─
@protobufjs/fetch
^1.1.1
→ 1.1.1
├─
@protobufjs/float
^1.0.2
→ 1.0.2
├─
@protobufjs/inquire
^1.1.2
→ 1.1.2
├─
@protobufjs/path
^1.1.2
→ 1.1.2
├─
@protobufjs/pool
^1.1.0
→ 1.1.0
├─
@protobufjs/utf8
^1.1.1
→ 1.1.1
├─
@sinclair/typebox
^0.34.0
→ 0.34.49
├─
@types/node
>=13.7.0
→ 25.9.1
├─
@types/request
^2.48.8
→ 2.48.13
├─
agent-base
^7.1.2
→ 7.1.4
├─
ansi-regex
^5.0.1
→ 5.0.1
├─
ansi-styles
^4.1.0
→ 4.3.0
├─
base64-js
^1.3.1
→ 1.5.1
├─
base64-js
^1.3.0
→ 1.5.1
├─
bignumber.js
^9.0.0
→ 9.3.1
├─
buffer
^5.5.0
→ 5.7.1
├─
buffer-equal-constant-time
^1.0.1
→ 1.0.1
├─
chalk
^4.1.0
→ 4.1.2
├─
clone
^1.0.2
→ 1.0.4
├─
color-convert
^2.0.1
├─
data-uri-to-buffer
^4.0.0
→ 4.0.1
├─
debug
4
→ 4.4.3
├─
debug
^4.1.1
→ 4.4.3
├─
defaults
^1.0.3
→ 1.0.4
├─
ecdsa-sig-formatter
^1.0.11
→ 1.0.11
├─
ecdsa-sig-formatter
1.0.11
→ 1.0.11
├─
emoji-regex
^8.0.0
├─
end-of-stream
^1.4.1
→ 1.4.5
├─
end-of-stream
^1.1.0
→ 1.4.5
├─
event-target-shim
^5.0.0
├─
extend
^3.0.2
→ 3.0.2
├─
fetch-blob
^3.1.4
→ 3.2.0
├─
formdata-polyfill
^4.0.10
→ 4.0.10
├─
gaxios
^7.1.4
→ 7.1.4
├─
gaxios
^6.0.0
→ 6.7.1
├─
gaxios
^6.1.1
→ 6.7.1
├─
gcp-metadata
^6.1.0
→ 6.1.1
├─
gcp-metadata
8.1.2
→ 8.1.2
├─
glob
^10.3.7
→ 10.5.0
├─
google-logging-utils
1.1.3
→ 1.1.3
├─
google-logging-utils
^0.0.2
→ 0.0.2
├─
gtoken
^7.0.0
→ 7.1.0
├─
has-flag
^4.0.0
→ 4.0.0
├─
http-proxy-agent
^5.0.0
→ 5.0.0
├─
https-proxy-agent
^7.0.1
→ 7.0.6
├─
https-proxy-agent
^5.0.0
→ 5.0.1
├─
ieee754
^1.1.13
→ 1.2.1
├─
inherits
^2.0.3
→ 2.0.4
├─
inherits
^2.0.4
→ 2.0.4
├─
is-fullwidth-code-point
^3.0.0
├─
is-stream
^2.0.0
→ 2.0.1
├─
is-unicode-supported
^0.1.0
→ 0.1.0
├─
json-bigint
^1.0.0
→ 1.0.0
├─
jwa
^2.0.1
→ 2.0.1
├─
jws
^4.0.0
→ 4.0.1
├─
lodash.camelcase
^4.3.0
→ 4.3.0
├─
long
^5.3.2
→ 5.3.2
├─
long
^5.0.0
→ 5.3.2
├─
node-fetch
^3.3.2
→ 3.3.2
├─
node-fetch
^2.6.9
→ 2.6.13
├─
once
^1.3.1
→ 1.4.0
├─
onetime
^5.1.0
→ 5.1.2
├─
protobufjs
^7.2.5
→ 7.6.1
├─
protobufjs
^7.5.3
→ 7.6.1
├─
readable-stream
^3.1.1
→ 3.6.2
├─
readable-stream
^3.4.0
→ 3.6.2
├─
safe-buffer
^5.0.1
→ 5.2.1
├─
safer-buffer
>= 2.1.2 < 3.0.0
→ 2.1.2
├─
signal-exit
^3.0.2
→ 3.0.7
├─
stream-events
^1.0.5
→ 1.0.5
├─
stream-shift
^1.0.2
→ 1.0.3
├─
string_decoder
^1.1.1
→ 1.3.0
├─
strip-ansi
^6.0.1
→ 6.0.1
├─
supports-color
^7.1.0
→ 7.2.0
├─
teeny-request
^9.0.0
→ 9.0.0
├─
teeny-request
^10.0.0
→ 10.1.2
├─
util-deprecate
^1.0.1
→ 1.0.2
├─
uuid
^9.0.1
→ 9.0.1
├─
uuid
^9.0.0
→ 9.0.1
├─
whatwg-url
^5.0.0
→ 5.0.0
├─
yargs
^17.7.2
→ 17.7.2
├─
@protobufjs/aspromise
^1.1.2
→ 1.1.2
├─
@protobufjs/aspromise
^1.1.1
→ 1.1.2
├─
@protobufjs/base64
^1.1.2
→ 1.1.2
├─
@protobufjs/codegen
^2.0.5
→ 2.0.5
├─
@protobufjs/eventemitter
^1.1.1
→ 1.1.1
├─
@protobufjs/fetch
^1.1.1
→ 1.1.1
├─
@protobufjs/float
^1.0.2
→ 1.0.2
├─
@protobufjs/inquire
^1.1.2
→ 1.1.2
├─
@protobufjs/path
^1.1.2
→ 1.1.2
├─
@protobufjs/pool
^1.1.0
→ 1.1.0
├─
@protobufjs/utf8
^1.1.1
→ 1.1.1
├─
@tootallnate/once
2
→ 2.0.0
├─
@types/caseless
*
→ 0.12.5
├─
@types/node
*
→ 25.9.1
├─
@types/node
>=13.7.0
→ 25.9.1
├─
@types/tough-cookie
*
→ 4.0.5
├─
agent-base
6
→ 6.0.2
├─
agent-base
^7.1.2
→ 7.1.4
├─
ansi-regex
^5.0.1
→ 5.0.1
├─
ansi-styles
^4.1.0
→ 4.3.0
├─
base64-js
^1.3.1
→ 1.5.1
├─
bignumber.js
^9.0.0
→ 9.3.1
├─
buffer-equal-constant-time
^1.0.1
→ 1.0.1
├─
cliui
^8.0.1
→ 8.0.1
├─
clone
^1.0.2
→ 1.0.4
├─
color-convert
^2.0.1
├─
data-uri-to-buffer
^4.0.0
→ 4.0.1
├─
debug
4
→ 4.4.3
├─
ecdsa-sig-formatter
1.0.11
→ 1.0.11
├─
escalade
^3.1.1
→ 3.2.0
├─
extend
^3.0.2
→ 3.0.2
├─
fetch-blob
^3.1.4
→ 3.2.0
├─
fetch-blob
^3.1.2
→ 3.2.0
├─
foreground-child
^3.1.0
→ 3.3.1
├─
form-data
^2.5.5
→ 2.5.5
├─
formdata-polyfill
^4.0.10
→ 4.0.10
├─
gaxios
^6.1.1
→ 6.7.1
├─
gaxios
^7.0.0
→ 7.1.4
├─
gaxios
^6.0.0
→ 6.7.1
├─
get-caller-file
^2.0.5
→ 2.0.5
├─
google-logging-utils
^1.0.0
→ 1.1.3
├─
google-logging-utils
^0.0.2
→ 0.0.2
├─
has-flag
^4.0.0
→ 4.0.0
├─
http-proxy-agent
^7.0.0
→ 7.0.2
├─
http-proxy-agent
^5.0.0
→ 5.0.0
├─
https-proxy-agent
^7.0.1
→ 7.0.6
├─
https-proxy-agent
^5.0.0
→ 5.0.1
├─
ieee754
^1.1.13
→ 1.2.1
├─
inherits
^2.0.3
→ 2.0.4
├─
is-stream
^2.0.0
→ 2.0.1
├─
jackspeak
^3.1.2
→ 3.4.3
├─
json-bigint
^1.0.0
→ 1.0.0
├─
jwa
^2.0.1
→ 2.0.1
├─
jws
^4.0.0
→ 4.0.1
├─
lodash.camelcase
^4.3.0
→ 4.3.0
├─
long
^5.0.0
→ 5.3.2
├─
long
^5.3.2
→ 5.3.2
├─
mimic-fn
^2.1.0
→ 2.1.0
├─
minimatch
^9.0.4
→ 9.0.9
├─
minipass
^7.1.2
→ 7.1.3
├─
ms
^2.1.3
→ 2.1.3
├─
node-domexception
^1.0.0
→ 1.0.0
├─
node-fetch
^2.6.9
→ 2.6.13
├─
node-fetch
^3.3.2
→ 3.3.2
├─
once
^1.4.0
→ 1.4.0
├─
package-json-from-dist
^1.0.0
→ 1.0.1
├─
path-scurry
^1.11.1
→ 1.11.1
├─
protobufjs
^7.5.5
→ 7.6.1
├─
protobufjs
^7.2.5
→ 7.6.1
├─
require-directory
^2.1.1
→ 2.1.1
├─
safe-buffer
~5.2.0
→ 5.2.1
├─
safe-buffer
^5.0.1
→ 5.2.1
├─
stream-events
^1.0.5
→ 1.0.5
├─
string-width
^4.2.3
→ 4.2.3
├─
string_decoder
^1.1.1
→ 1.3.0
├─
stubs
^3.0.0
→ 3.0.0
├─
supports-color
^7.1.0
→ 7.2.0
├─
tr46
~0.0.3
→ 0.0.3
├─
undici-types
>=7.24.0 <7.24.7
→ 7.24.6
├─
util-deprecate
^1.0.1
→ 1.0.2
├─
uuid
^9.0.1
→ 9.0.1
├─
uuid
^9.0.0
→ 9.0.1
├─
web-streams-polyfill
^3.0.3
→ 3.3.3
├─
webidl-conversions
^3.0.0
→ 3.0.1
├─
whatwg-url
^5.0.0
→ 5.0.0
├─
wrappy
1
→ 1.0.2
├─
y18n
^5.0.5
→ 5.0.8
├─
yargs
^17.7.2
→ 17.7.2
├─
yargs-parser
^21.1.1
→ 21.1.1
├─
@isaacs/cliui
^8.0.2
→ 8.0.2
├─
@protobufjs/aspromise
^1.1.2
→ 1.1.2
├─
@protobufjs/aspromise
^1.1.1
→ 1.1.2
├─
@protobufjs/base64
^1.1.2
→ 1.1.2
├─
@protobufjs/codegen
^2.0.5
→ 2.0.5
├─
@protobufjs/eventemitter
^1.1.1
→ 1.1.1
├─
@protobufjs/fetch
^1.1.1
→ 1.1.1
├─
@protobufjs/float
^1.0.2
→ 1.0.2
├─
@protobufjs/inquire
^1.1.2
→ 1.1.2
├─
@protobufjs/path
^1.1.2
→ 1.1.2
├─
@protobufjs/pool
^1.1.0
→ 1.1.0
├─
@protobufjs/utf8
^1.1.1
→ 1.1.1
├─
@tootallnate/once
2
→ 2.0.0
├─
@types/node
>=13.7.0
→ 25.9.1
├─
agent-base
^7.1.0
→ 7.1.4
├─
agent-base
6
→ 6.0.2
├─
agent-base
^7.1.2
→ 7.1.4
├─
asynckit
^0.4.0
├─
bignumber.js
^9.0.0
→ 9.3.1
├─
brace-expansion
^2.0.2
→ 2.1.1
├─
buffer-equal-constant-time
^1.0.1
→ 1.0.1
├─
cliui
^8.0.1
→ 8.0.1
├─
color-convert
^2.0.1
├─
combined-stream
^1.0.8
→ 1.0.8
├─
cross-spawn
^7.0.6
→ 7.0.6
├─
data-uri-to-buffer
^4.0.0
→ 4.0.1
├─
debug
^4.3.4
→ 4.4.3
├─
debug
4
→ 4.4.3
├─
ecdsa-sig-formatter
1.0.11
→ 1.0.11
├─
emoji-regex
^8.0.0
├─
es-set-tostringtag
^2.1.0
→ 2.1.0
├─
escalade
^3.1.1
→ 3.2.0
├─
extend
^3.0.2
→ 3.0.2
├─
fetch-blob
^3.1.2
→ 3.2.0
├─
fetch-blob
^3.1.4
→ 3.2.0
├─
formdata-polyfill
^4.0.10
→ 4.0.10
├─
get-caller-file
^2.0.5
→ 2.0.5
├─
has-flag
^4.0.0
→ 4.0.0
├─
hasown
^2.0.2
→ 2.0.4
├─
https-proxy-agent
^7.0.1
→ 7.0.6
├─
is-fullwidth-code-point
^3.0.0
├─
is-stream
^2.0.0
→ 2.0.1
├─
jwa
^2.0.1
→ 2.0.1
├─
long
^5.3.2
→ 5.3.2
├─
lru-cache
^10.2.0
→ 10.4.3
├─
mime-types
^2.1.35
→ 2.1.35
├─
minipass
^5.0.0 || ^6.0.2 || ^7.0.0
→ 7.1.3
├─
ms
^2.1.3
→ 2.1.3
├─
node-domexception
^1.0.0
→ 1.0.0
├─
node-fetch
^2.6.9
→ 2.6.13
├─
node-fetch
^3.3.2
→ 3.3.2
├─
require-directory
^2.1.1
→ 2.1.1
├─
safe-buffer
~5.2.0
→ 5.2.1
├─
safe-buffer
^5.2.1
→ 5.2.1
├─
safe-buffer
^5.0.1
→ 5.2.1
├─
signal-exit
^4.0.1
→ 4.1.0
├─
string-width
^4.2.3
→ 4.2.3
├─
string-width
^4.2.0
→ 4.2.3
├─
strip-ansi
^6.0.1
→ 6.0.1
├─
stubs
^3.0.0
→ 3.0.0
├─
tr46
~0.0.3
→ 0.0.3
├─
undici-types
>=7.24.0 <7.24.7
→ 7.24.6
├─
uuid
^9.0.1
→ 9.0.1
├─
web-streams-polyfill
^3.0.3
→ 3.3.3
├─
webidl-conversions
^3.0.0
→ 3.0.1
├─
whatwg-url
^5.0.0
→ 5.0.0
├─
wrap-ansi
^7.0.0
→ 7.0.0
├─
wrappy
1
→ 1.0.2
├─
y18n
^5.0.5
→ 5.0.8
├─
yargs-parser
^21.1.1
→ 21.1.1
├─
@protobufjs/aspromise
^1.1.1
→ 1.1.2
├─
agent-base
^7.1.2
→ 7.1.4
├─
ansi-regex
^5.0.1
→ 5.0.1
├─
ansi-styles
^4.0.0
→ 4.3.0
├─
balanced-match
^1.0.0
→ 1.0.2
├─
buffer-equal-constant-time
^1.0.1
→ 1.0.1
├─
data-uri-to-buffer
^4.0.0
→ 4.0.1
├─
debug
4
→ 4.4.3
├─
delayed-stream
~1.0.0
→ 1.0.0
├─
ecdsa-sig-formatter
1.0.11
→ 1.0.11
├─
emoji-regex
^8.0.0
├─
es-errors
^1.3.0
→ 1.3.0
├─
fetch-blob
^3.1.2
→ 3.2.0
├─
fetch-blob
^3.1.4
→ 3.2.0
├─
formdata-polyfill
^4.0.10
→ 4.0.10
├─
function-bind
^1.1.2
→ 1.1.2
├─
get-intrinsic
^1.2.6
→ 1.3.1
├─
has-tostringtag
^1.0.2
→ 1.0.2
├─
hasown
^2.0.2
→ 2.0.4
├─
is-fullwidth-code-point
^3.0.0
├─
mime-db
1.52.0
├─
ms
^2.1.3
→ 2.1.3
├─
node-domexception
^1.0.0
→ 1.0.0
├─
path-key
^3.1.0
→ 3.1.1
├─
safe-buffer
^5.0.1
→ 5.2.1
├─
shebang-command
^2.0.0
→ 2.0.0
├─
string-width
^5.1.2
→ 5.1.2
├─
string-width
^4.2.0
→ 4.2.3
├─
string-width
^4.1.0
→ 4.2.3
├─
string-width-cjs
npm:string-width@^4.2.0
├─
strip-ansi
^7.0.1
→ 7.2.0
├─
strip-ansi
^6.0.0
→ 6.0.1
├─
strip-ansi
^6.0.1
→ 6.0.1
├─
strip-ansi-cjs
npm:strip-ansi@^6.0.1
├─
tr46
~0.0.3
→ 0.0.3
├─
undici-types
>=7.24.0 <7.24.7
→ 7.24.6
├─
web-streams-polyfill
^3.0.3
→ 3.3.3
├─
webidl-conversions
^3.0.0
→ 3.0.1
├─
whatwg-url
^5.0.0
→ 5.0.0
├─
which
^2.0.1
→ 2.0.2
├─
wrap-ansi
^8.1.0
→ 8.1.0
├─
wrap-ansi
^7.0.0
→ 7.0.0
├─
wrap-ansi-cjs
npm:wrap-ansi@^7.0.0
├─
ansi-regex
^5.0.1
→ 5.0.1
├─
ansi-regex
^6.2.2
→ 6.2.2
├─
ansi-styles
^6.1.0
→ 6.2.3
├─
ansi-styles
^4.0.0
→ 4.3.0
├─
async-function
^1.0.0
├─
async-generator-function
^1.0.0
→ 1.0.0
├─
call-bind-apply-helpers
^1.0.2
→ 1.0.2
├─
color-convert
^2.0.1
├─
eastasianwidth
^0.2.0
→ 0.2.0
├─
emoji-regex
^8.0.0
├─
emoji-regex
^9.2.2
├─
es-define-property
^1.0.1
→ 1.0.1
├─
es-errors
^1.3.0
→ 1.3.0
├─
es-object-atoms
^1.1.1
→ 1.1.2
├─
fetch-blob
^3.1.2
→ 3.2.0
├─
function-bind
^1.1.2
→ 1.1.2
├─
generator-function
^2.0.0
→ 2.0.1
├─
get-proto
^1.0.1
├─
gopd
^1.2.0
→ 1.2.0
├─
has-symbols
^1.1.0
→ 1.1.0
├─
has-symbols
^1.0.3
→ 1.1.0
├─
hasown
^2.0.2
→ 2.0.4
├─
is-fullwidth-code-point
^3.0.0
├─
isexe
^2.0.0
→ 2.0.0
├─
math-intrinsics
^1.1.0
→ 1.1.0
├─
ms
^2.1.3
→ 2.1.3
├─
node-domexception
^1.0.0
→ 1.0.0
├─
safe-buffer
^5.0.1
→ 5.2.1
├─
shebang-regex
^3.0.0
├─
string-width
^5.0.1
→ 5.1.2
├─
string-width
^4.1.0
→ 4.2.3
├─
strip-ansi
^6.0.0
→ 6.0.1
├─
strip-ansi
^6.0.1
→ 6.0.1
├─
strip-ansi
^7.0.1
→ 7.2.0
├─
tr46
~0.0.3
→ 0.0.3
├─
web-streams-polyfill
^3.0.3
→ 3.3.3
├─
webidl-conversions
^3.0.0
→ 3.0.1
├─
ansi-regex
^5.0.1
→ 5.0.1
├─
ansi-regex
^6.2.2
→ 6.2.2
├─
color-convert
^2.0.1
├─
eastasianwidth
^0.2.0
→ 0.2.0
├─
emoji-regex
^9.2.2
├─
emoji-regex
^8.0.0
├─
es-errors
^1.3.0
→ 1.3.0
├─
function-bind
^1.1.2
→ 1.1.2
├─
is-fullwidth-code-point
^3.0.0
├─
node-domexception
^1.0.0
→ 1.0.0
├─
strip-ansi
^7.0.1
→ 7.2.0
├─
strip-ansi
^6.0.1
→ 6.0.1
├─
web-streams-polyfill
^3.0.3
→ 3.3.3
├─
ansi-regex
^6.2.2
→ 6.2.2
├─
ansi-regex
^5.0.1
→ 5.0.1
Changes from v4.1.1
No metadata changes detected.
File Changes
0 added
0 removed
1 modified
size delta: .0 KB
Risk Dispositions (2 applicable to this version, 0 other)
Accepted rules are downgraded to INFO on future analyses; rejected rules escalate to CRITICAL.
| Rule | Source | Disposition | Author | Reason | |
|---|---|---|---|---|---|
regressed-provenance |
provenance | reject | AI | AI (provenance): Attestation regression on an established Datadog package is a strong compromise indicator; should fail every version until restored. | |
publisher-changed |
provenance | reject | AI | AI (provenance): Publisher changed from datadog org account to GitHub Actions on same date as attestation regression; consistent with account compromise. |
SAST Findings (2)
HIGH
Provenance attestation missing — previous versions had it
provenance
This version was published without provenance, but prior versions were published via CI/CD with attestations. This is a strong signal of a potential account compromise or unauthorized publish. The axios attack (March 2026) exhibited exactly this pattern.
HIGH
Publisher changed: datadog → GitHub Actions (on 2025-11-04)
provenance
This version was published by a different npm account than previous versions on 2025-11-04. This could indicate a legitimate maintainer transition or an account compromise.
Review Summary
Risk score: 50. Findings: 2 high (+50), 1 info (+0).
Commit: 8f2e1a5636c8 Browse source
Published to npm: