zenstack
FullStack enhancement for Prisma ORM: seamless integration from database to UI
82%
Total Score
100
50
100
75
50
Telemetry detected in 2 versions
Health Score Breakdown
No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent even though other repository evidence supports an established project.
The package declares 24 runtime dependencies, a relatively broad dependency surface for a toolkit, but the profile is explicit and consistent with its CLI, language-server, and generation features.
A postinstall script runs during installation, increasing install-time behavior and review requirements compared with a package without lifecycle scripts.
All 25 analyzed action references are unpinned, including a high-confidence unpinned container image; high-confidence adhoc package installation and medium-confidence template-injection findings add workflow hygiene risk. The audit found no untrusted checkout or script-injection sink, and low-confidence cache findings carry limited weight.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ora Version ^5.4.1 | — | — |
uuid Version ^11.1.1 | — | — |
colors Version 1.4.0 | — | — |
semver Version ^7.5.2 | — | — |
langium Version 1.3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 4 years ago
- Unpacked Size
- 1.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.