This package is intended for Prisma's internal use
82%
Total Score
100
100
89
83
100
The repository name does not match the package and its README does not mention @prisma/debug, which creates a provenance-clarity concern. The organization-owned repository and large monorepo-style tree partly explain this mismatch but do not remove it entirely.
Version 7.10.0 is a stable, non-prerelease major release, although the recent prerelease share is very high, suggesting an unusually fluid release stream.
All 17 workflows were analyzed with no untrusted checkout or script-injection findings, and most use read-only or job-level permissions. High-confidence secrets-inherit and trusted-publishing findings remain workflow hygiene concerns, while the cache-poisoning findings are low confidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.