This package is intended for Prisma's internal use
88%
Total Score
healthy
Active Prisma maintenance and verified publishing outweigh limited registry-account and workflow hygiene concerns.
Two publishers use the prisma.io domain, while aqrln (aqrln.net) and rtbenfield (tylerbenfield.me) are outside-domain accounts; organization backing reduces maintenance risk, but those accounts create publishing-account hygiene concerns.
The repository name does not match @prisma/internals and its README does not mention the package. A monorepo mismatch is normal, but the absence of a README mention leaves some uncertainty about the exact package-to-repository relationship.
All 18 workflows were analyzed with no untrusted checkout or script-injection findings; only two of 47 action references are unpinned. The high-confidence secrets-inherit finding is a real credential-scope concern, while the low-confidence cache-poisoning findings are hygiene concerns and trusted publishing is informational.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
arg Version 5.0.2 | — | — |
prompts Version 2.4.2 | — | — |
@prisma/dmmf Version 7.10.1 | — | — |
@prisma/debug Version 7.10.1 | — | — |
@prisma/config Version 7.10.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.