dd-trace 6.0.0-pre-be5ecaf

Datadog APM tracing client for JavaScript

dd-trace@6.0.0-pre-be5ecaf was published on 2025-02-19. Its manifest declares 32 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=18.

All dd-trace versions · Permanent reference to 6.0.0-pre-be5ecaf · Latest release

Package specifications

Version	6.0.0-pre-be5ecaf
License declaration	(Apache-2.0 OR BSD-3-Clause)
Published	2025-02-19T15:14:44.167Z
Node.js requirement	>=18
Type declarations	Bundled declarations
Runtime dependency count	32
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	2400.13 KiB
Published file count	690
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	56
Repository stars	840
Repository forks	415

Install dd-trace 6.0.0-pre-be5ecaf

npm install dd-trace@6.0.0-pre-be5ecaf
pnpm add dd-trace@6.0.0-pre-be5ecaf
yarn add dd-trace@6.0.0-pre-be5ecaf

Runtime dependencies

rfdc ^1.3.1
retry ^0.13.1
ignore ^5.2.4
koalas ^1.0.2
limiter 1.1.5
ttl-set ^1.0.0
semifies ^1.0.0
lru-cache ^7.14.0
protobufjs ^7.2.5
source-map ^0.7.4
dc-polyfill ^0.1.4
opentracing >=0.12.1
shell-quote ^1.8.1
pprof-format ^2.1.0
jest-docblock ^29.7.0
lodash.sortby ^4.7.0
@datadog/pprof 5.5.1
path-to-regexp ^0.1.12
@isaacs/ttlcache ^1.4.1
crypto-randomuuid ^1.0.0
@opentelemetry/api >=1.0.0 <1.9.0
@datadog/libdatadog ^0.4.0
@opentelemetry/core ^1.14.0
tlhunter-sorted-set ^0.1.0
@datadog/sketches-js ^2.1.0
import-in-the-middle 1.11.2
istanbul-lib-coverage 3.2.0
@datadog/native-appsec 8.4.0
@datadog/native-metrics ^3.1.0
module-details-from-path ^1.0.3
@datadog/native-iast-rewriter 2.8.0
@datadog/native-iast-taint-tracking 3.3.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@datadog/libdatadog@0.4.0 — direct
@datadog/native-appsec@8.4.0 — direct
@datadog/native-iast-rewriter@2.8.0 — direct
@datadog/native-iast-taint-tracking@3.3.0 — direct
@datadog/native-metrics@3.1.2 — direct
@datadog/pprof@5.5.1 — direct
@datadog/sketches-js@2.1.1 — direct
@isaacs/ttlcache@1.4.1 — direct
@opentelemetry/api@1.8.0 — direct
@opentelemetry/core@1.30.1 — direct
@opentelemetry/semantic-conventions@1.28.0 — indirect
@protobufjs/aspromise@1.1.2 — indirect
@protobufjs/base64@1.1.2 — indirect
@protobufjs/codegen@2.0.5 — indirect
@protobufjs/eventemitter@1.1.1 — indirect
@protobufjs/fetch@1.1.1 — indirect
@protobufjs/float@1.0.2 — indirect
@protobufjs/path@1.1.2 — indirect
@protobufjs/pool@1.1.0 — indirect
@protobufjs/utf8@1.1.2 — indirect
@types/node@26.6.6 — indirect
acorn@8.19.0 — indirect
acorn-import-attributes@1.9.5 — indirect
cjs-module-lexer@1.4.3 — indirect
crypto-randomuuid@1.0.0 — direct
dc-polyfill@0.1.11 — direct
delay@5.0.0 — indirect
detect-newline@3.1.0 — indirect
fast-fifo@1.3.2 — indirect
ignore@5.3.2 — direct
import-in-the-middle@1.11.2 — direct
istanbul-lib-coverage@3.2.0 — direct
jest-docblock@29.7.0 — direct
koalas@1.0.2 — direct
limiter@1.1.5 — direct
lodash.sortby@4.7.0 — direct
long@5.3.2 — indirect
lru-cache@7.18.3 — direct
module-details-from-path@1.0.4 — direct
node-addon-api@6.1.0 — indirect
node-gyp-build@3.9.0 — indirect
node-gyp-build@4.8.4 — indirect
opentracing@0.14.7 — direct
p-limit@3.1.0 — indirect
path-to-regexp@0.1.13 — direct
pprof-format@2.3.2 — direct
protobufjs@7.6.6 — direct
retry@0.13.1 — direct
rfdc@1.4.1 — direct
semifies@1.0.0 — direct
shell-quote@1.12.0 — direct
source-map@0.7.6 — direct
tlhunter-sorted-set@0.1.0 — direct
ttl-set@1.0.0 — direct
undici-types@8.9.0 — indirect
yocto-queue@0.1.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Maintained	10/10 — 30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	10/10 — security policy file detected
Code-Review	10/10 — all changesets reviewed
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	0/10 — dangerous workflow patterns detected
License	9/10 — license file detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	8/10 — dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	5/10 — branch protection is not maximal on development and all release branches
Packaging	10/10 — packaging workflow detected
Fuzzing	0/10 — project is not fuzzed
SAST	8/10 — SAST tool detected but not run on all commits

Evidence and freshness

https://registry.npmjs.org/dd-trace/6.0.0-pre-be5ecaf — retrieved 2026-10-31T14:32:58.663Z
https://api.deps.dev/v3/projects/github.com%2FDataDog%2Fdd-trace-js — retrieved 2026-10-31T13:38:33.226Z
https://api.deps.dev/v3/systems/npm/packages/dd-trace/versions/6.0.0-pre-be5ecaf — retrieved 2026-10-31T14:32:59.091Z
https://api.deps.dev/v3/systems/npm/packages/dd-trace/versions/6.0.0-pre-be5ecaf:dependencies — retrieved 2026-10-31T14:32:59.102Z