This package is intended for Prisma's internal use
88%
Total Score
healthy
Healthy overall, backed by active maintenance and provenance; internal-only, unstable APIs and workflow findings add caveats.
The package has a README and this exact version has GitHub release notes; repository tests and a changelog are also present. The README warns that this is for Prisma internal use and does not follow SemVer, so downstream API stability is limited.
The repository name does not match @prisma/dmmf and its README does not mention the package, creating an ownership-transparency gap; the organization-backed monorepo context partly explains the mismatch but does not remove it.
All 17 workflows were analyzed with no untrusted checkouts or script-injection findings. High-confidence secrets-inherit and use-trusted-publishing findings indicate credential-scope and publishing-hygiene concerns, while the cache-poisoning findings are low confidence.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.