5.4
dd-trace
📦 npm PackageDatadog Inc.
Datadog APM tracing client for JavaScript
29,739,065 usersv5.105.0
Medium Risk5.4/10
Scanned June 1, 2026
·Risk Flags
Runs code before installation completes: node scripts/preinstall.js
Developer identity not verified by the platform
3.0
Permissions
5.0
Developer
10.0
Data Privacy
2.0
Policy Match
Permissions (2)
Runs code before installation completes: node scripts/preinstall.js
script:preinstall
Runs on install and before publish: node scripts/patch-istanbul-lib-coverage.js && cd vendor && npm ci --include=dev
script:prepare
Developer
NameDatadog Inc.
Verified PublisherUnverified
Known EntityNot recognized
Websitehttps://github.com/DataDog/dd-trace-js#readme
Contactinfo@datadoghq.com
Data Flows
No external data transmission detected
This tool does not appear to send data to external servers.
Privacy Policy Analysis
Policy Status
No policy found
Policy matches observed behavior
Higher-Scored Alternatives
Other npm Packages with stronger security profiles
9.4
@aws-sdk/client-sqs
AWS SDK for JavaScript Sqs Client for Node.js, Browser and React Native
9.4/10+4.0 vs this tool
9.4
@emotion/react
> Simple styling in React. 74M monthly downloads. License: MIT
9.4/10+4.0 vs this tool
9.4
cookie-parser
Parse HTTP request cookies. Keywords: cookie, middleware. 38M monthly downloads. License: MIT
9.4/10+4.0 vs this tool
9.4
@reduxjs/toolkit
The official, opinionated, batteries-included toolset for efficient Redux development
9.4/10+4.0 vs this tool
Know what your tools are really doing.