prisma

Repo toolingcaution

The repository uses Turbo and npm scripts, but no security-scanning tools were detected; the active build tooling is positive while the missing scanning is a modest transparency gap.

Version stabilitycaution

This release is a prerelease and all recent releases are prereleases, so behavior may still change; the mature release history partly compensates but does not make the beta stable.

Workflow auditcaution

All eight workflows were analyzed, use zero unpinned actions out of 41, and avoid untrusted checkouts and script injection. A high-severity cache-poisoning pattern was reported with low confidence, while trusted publishing is a positive practice; the cache result warrants only limited caution.