@prisma/internals
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@prisma/prisma-schema-wasm | AI (dependencies): First-party Prisma org dependency; versioned alongside this package in the same release pipeline. | ai | |
| dependencies | unvetted-dep:@prisma/schema-engine-wasm | AI (dependencies): First-party Prisma org dependency; versioned alongside this package in the same release pipeline. | ai | |
| dependencies | unvetted-dep:@prisma/schema-files-loader | AI (dependencies): First-party Prisma org dependency at matching version 6.19.3; part of the same monorepo release. | ai | |
| phantom-deps | phantom-dep:@streamparser/json | AI (phantom-deps): @streamparser/json is a declared runtime dependency in package.json; phantom-dep is a false positive for this package. | ai |
Versions (showing 7 of 7)
| Version | Deps | Published |
|---|---|---|
| 7.8.0 | 16 / 37 | |
| 7.7.0 | 16 / 37 | |
| 7.4.0 | 14 / 44 | |
| 7.3.0 | 14 / 44 | |
| 7.2.0 | 14 / 44 | |
| 6.19.3 | 14 / 45 | |
| 6.19.2 | 14 / 45 |
v7.8.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v7.7.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v7.4.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v7.3.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v7.2.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.19.3
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.19.2
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.