← Home

@prisma-next/migration-tools

npm Repository Homepage

On-disk migration persistence, attestation, and chain reconstruction for Prisma Next

20
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

sevinftylerhogarthaqrlnwmadden-prisma

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff source-size-tripled AI (source-diff): Size increase corresponds to new aggregate export and related modules; backed by SLSA provenance. ai
source-diff large-new-source-files AI (source-diff): 66 new files match the new aggregate export surface area; no malicious indicators found. ai
semgrep semgrep:api-obfuscation-reflect AI (semgrep): Reflect.get used inside a Proxy handler for prototype-bound field forwarding — standard JS pattern, not obfuscation. ai
provenance missing-githead AI (provenance): SLSA attestation provides stronger integrity guarantee than gitHead; absence of gitHead is not a meaningful risk here. ai
phantom-deps phantom-dep:@prisma-next/utils AI (phantom-deps): Same-org workspace sibling; phantom-dep heuristic unreliable for monorepo packages. ai

Versions (showing 20 of 20)

Version Deps Published
0.16.0 6 / 6
0.15.0 6 / 6
0.14.0 6 / 6
0.13.0 6 / 6
0.12.0 6 / 6
0.11.0 6 / 5
0.10.0 6 / 5
0.9.0 6 / 5
0.8.0 6 / 5
0.7.0 6 / 5
0.6.1 6 / 5
0.5.1 6 / 5
0.5.0 6 / 5
0.4.4 6 / 5
0.4.3 6 / 5
0.4.2 6 / 5
0.4.1 6 / 5
0.3.0 5 / 5
0.0.2 5 / 5
0.0.1 5 / 5

v0.16.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.15.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.