@prisma/prisma-fmt-wasm

Build provenancecaution

No registry build attestation or trusted publisher identity is present. The repository documents a reproducible Nix build, which improves transparency but does not replace verifiable release provenance.

Release historycaution

The package has a substantial history of 1,251 releases, but its latest release was over three years ago and it has had no releases in the last 12 months. The active source repository partly compensates for the stale registry publication, but the release itself may be outdated.

Token permissionscaution

Twenty of 23 workflows lack top-level token permissions, three publishing workflows request top-level write access, and none declare read-only permissions. This is a meaningful CI hardening gap, although no dangerous workflow pattern was detected.

Version stabilitycaution

This release is a prerelease, and all recent releases are prereleases, which signals an internal or unstable publishing track. Its stable major version provides some context, but consumers should expect API changes.