Paklo Docs
Paklo Docs

Introduction

Getting StartedHosted ServiceConfiguration

Extensions

Azure DevOps ExtensionCLI

General

Private Registries and FeedsSecurity Advisories and VulnerabilitiesExperimentsUsage StatsLimitations and Unsupported Features

Advanced

Custom CA CertificatesTroubleshootingContributing

Usage Stats

What Paklo collects from job usage telemetry and why.

Paklo receives a small usage event when a Dependabot job finishes. This helps us understand which parts of Paklo are being used, which package ecosystems are active, and where reliability work should be focused.

Usage events are sent by the job runner used by the CLI, Azure DevOps extension, and hosted job execution path. Commands that only validate or generate configuration do not run Dependabot jobs and do not send these events.

Failed usage-stat sends are ignored and do not change the job result.

For environments with stricter usage-stat requirements, set the PAKLO_TELEMETRY_DISABLED environment variable to a truthy value before running the job.

This page describes the usage-stat payload sent by the job runner. The hosted service also processes information needed to operate Paklo Cloud; see the privacy policy and product documentation for broader service data handling.

What is collected

FieldDescriptionExamples
toolThe calling package and version.@paklo/cli@0.21.0
triggerWhether the job was started by a user command or by the service.user, service
providerThe source provider for the repository.azure
ownerThe provider organization, account, or collection URL.https://dev.azure.com/<org>/
projectThe provider project or workspace URL.https://dev.azure.com/<org>/<project>
package-managerThe Dependabot package manager used for the job.npm_and_yarn, terraform, pip
multi-ecosystem-updateWhether the job is part of a multi-ecosystem update group, when available.true, false
idThe job identifier, used to correlate the event with job logs and status.2850677077
startedThe job start time.2025-10-03T14:44:00.191Z
durationHow long the job took, in milliseconds.31812
successWhether the job completed successfully.true, false
error.messageThe job error message when the job fails, truncated to 1000 characters.Error running updater: ...
host.platformThe operating system platform.linux, darwin, win32
host.releaseThe operating system release version.26.0.0, 10.0.19043
host.archThe CPU architecture.x64, arm64
host.machine-hashA SHA-256 hash of the machine hostname.d3bbb6...
host.docker-containerWhether the job appears to be running inside Docker.true, false

Collection endpoint

Usage events are sent to https://www.paklo.app/api/usage-telemetry or https://paklo.app/api/usage-telemetry and it may be a good idea to allowlist paklo.app and its subdomains in your network policies to ensure these events are received and help improve the free product.

How is this guide?

Last updated on

Experiments

Enable and configure Dependabot experiments to access preview features and customize update behavior.

Limitations and Unsupported Features

Known limitations and unsupported configuration options for Dependabot on Azure DevOps.

On this page

What is collected
Collection endpoint