This library uses an abstract syntax tree to parse schema.prisma files into an object in JavaScript. It is similar to [@prisma/sdk](https://github.com/prisma/prisma/tree/master/src/packages/sdk) except that it preserves comments and model attributes.
68%
Total Score
63
100
89
63
50
No build attestation, trusted publisher, or staged publishing evidence is present, leaving the origin of the published artifact less verifiable.
A prepare script runs during installation, adding build or install-time behavior that consumers should account for, but this alone is not a severe health concern.
Only one registry account has publish access, creating a modest continuity and release-account risk. The linked repository is user-owned rather than organization-backed, so no organizational compensation is shown.
The registry namespace and repository are both owned by the same individual account, which supports ownership alignment but does not provide the redundancy of organization backing.
The repository recorded 0 commits and 0 active maintainers over the last 3 months, indicating a recent pause in development. This is partly offset by the release in May 2026 but still raises maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lilconfig Version ^2.1.0 | — | — |
chevrotain Version ^12.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.