Node and Bun local Prisma Streams runtime for trusted development workflows.
72%
Total Score
caution
Usable with caveats: a young release line and unpinned CI actions temper strong organization backing and build provenance.
The package had 13 releases in about 193 days with a median interval of roughly 6 days, showing strong early development, but no release has appeared for about 3.5 months.
Only two commits came from two maintainers in the last three months, which is thin direct commit activity, although the broader repository activity shows ongoing project work.
The repository name does not match the package and its README does not mention @prisma/streams-local, so the package-to-repository relationship is not directly established by the collected README evidence.
Version 0.1.11 is not a stable-major release, so its API may still change despite being a normal, non-prerelease version.
Both workflows were audited successfully with no dangerous sinks or findings, but all 15 action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene and supply-chain weaknesses, not severe risks on their own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ajv Version ^8.12.0 | — | — |
env-paths Version ^3.0.0 | — | — |
better-result Version ^2.7.0 | — | — |
proper-lockfile Version ^4.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.