← Home

@prisma-next/family-mongo

npm Repository Homepage

Mongo family descriptor for Prisma Next

19
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

sevinftylerhogarthaqrlnwmadden-prisma

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-added AI (maintainer-change): New maintainer added alongside CI/CD migration; consistent with legitimate org onboarding. ai
phantom-deps phantom-dep:pathe AI (phantom-deps): pathe referenced in config files only; stable false positive for this package. ai
phantom-deps phantom-dep:@prisma-next/errors AI (phantom-deps): Same-org dep; phantom detection is a stable false positive for this monorepo package. ai
provenance publisher-changed AI (provenance): Transition from wmadden-prisma to GitHub Actions CI with SLSA attestation; consistent with org-level CI migration. ai
phantom-deps phantom-dep:@prisma-next/emitter AI (phantom-deps): Same org scope; likely re-exported or used indirectly via sibling packages. ai

Versions (showing 19 of 19)

Version Deps Published
0.16.0 14 / 7
0.15.0 14 / 7
0.14.0 14 / 7
0.13.0 12 / 7
0.12.0 12 / 7
0.11.0 13 / 7
0.10.0 13 / 7
0.9.0 13 / 7
0.8.0 15 / 7
0.7.0 15 / 7
0.6.1 15 / 7
0.5.1 15 / 6
0.5.0 15 / 6
0.4.4 15 / 6
0.4.3 15 / 6
0.4.2 15 / 6
0.4.1 15 / 6
0.3.0 10 / 6
0.0.1 6 / 5

v0.16.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.15.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.