← Home

@prisma-next/extension-paradedb

npm Repository Homepage

ParadeDB full-text search extension pack for Prisma Next.

18
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

sevinftylerhogarthaqrlnwmadden-prisma

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance slsa-provenance AI (provenance): Package consistently published via CI with SLSA attestation; stable signal for this package. ai
phantom-deps phantom-dep:@prisma-next/sql-operations AI (phantom-deps): Same-org monorepo dep; likely re-exported or used indirectly. Stable false positive. ai
phantom-deps phantom-dep:@prisma-next/contract-authoring AI (phantom-deps): Same-org monorepo dep; likely re-exported or used indirectly. Stable false positive. ai
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI/CD publishing with SLSA attestation; consistent with official prisma org automation. ai
phantom-deps phantom-dep:@prisma-next/contract AI (phantom-deps): Same org scope (@prisma-next); likely re-exported or used indirectly via contract-authoring peer. ai

Versions (showing 18 of 18)

Version Deps Published
0.16.0 10 / 11
0.15.0 10 / 11
0.14.0 10 / 11
0.13.0 10 / 11
0.12.0 10 / 11
0.11.0 10 / 11
0.10.0 10 / 11
0.9.0 10 / 11
0.8.0 10 / 11
0.6.1 10 / 11
0.5.1 10 / 11
0.5.0 9 / 9
0.4.4 2 / 5
0.4.3 2 / 5
0.4.2 2 / 5
0.4.1 2 / 5
0.3.0 2 / 5
0.0.1 2 / 5

v0.16.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.15.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.