Package Health

@prisma/internals

This package is intended for Prisma's internal use

Latest 7.10.1NPMNPM

88%

Total Score

healthy

Active Prisma maintenance and verified publishing outweigh limited registry-account and workflow hygiene concerns.

Health Score Breakdown

Maintainerscaution

Two publishers use the prisma.io domain, while aqrln (aqrln.net) and rtbenfield (tylerbenfield.me) are outside-domain accounts; organization backing reduces maintenance risk, but those accounts create publishing-account hygiene concerns.

Repo package mentioncaution

The repository name does not match @prisma/internals and its README does not mention the package. A monorepo mismatch is normal, but the absence of a README mention leaves some uncertainty about the exact package-to-repository relationship.

Workflow auditcaution

All 18 workflows were analyzed with no untrusted checkout or script-injection findings; only two of 47 action references are unpinned. The high-confidence secrets-inherit finding is a real credential-scope concern, while the low-confidence cache-poisoning findings are hygiene concerns and trusted publishing is informational.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
arg
Version 5.0.2
—
—
prompts
Version 2.4.2
—
—
@prisma/dmmf
Version 7.10.1
—
—
@prisma/debug
Version 7.10.1
—
—
@prisma/config
Version 7.10.1
—
—

Weekly Downloads

Info

Last Published
3 hours ago
Created
4 years ago
Unpacked Size
2.3 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform