prisma / orm
Repository health
Security, maintenance, dependencies and license for prisma/orm.
Security
0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low
72 dependencies checked (22 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 7.2/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: Apache-2.010/10
- Tests run on pull requestsCI configured + tests present10/10
- Security policySECURITY.md present10/10
- Static analysis on commitsCodeQL action detected in workflows10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesAll actions pinned to SHAs10/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
Maintenance
23 Oct 2026
Last commit
active
100+
Commits in the last year
32
Contributors
all time · 2 in the last 100 commits
v8.0.0-rc.20
Latest release
~3d cadence
Outside contributions: 61 of 90 external pull requests merged (95% of those decided), median 0.3 days to merge.From the 90 most recently updated pull requests, bots excluded.
Recent releases
- v8.0.0-rc.2022 Oct 2026 · 1 day after previous
- v8.0.0-rc.1921 Oct 2026 · 2 days after previous
- 7.10.119 Oct 2026 · 5 days after previous
- v8.0.0-rc.1814 Oct 2026 · 6 days after previous
- v8.0.0-rc.178 Oct 2026 · 1 day after previous
Pull requests
- Open
- 13
- 0 stale (60+ days, no update in 30)
- Merged
- 15
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 3
- not listed below
Open
- #30869 TML-3537: Changing a value object or a variant is a migration, and Postgres checks value object and discriminator columnswmadden-electric · opened today
- #30847 TML-3712: PostgreSQL gets convenience types DateTime, Date, Time and Duration, and the tools write themwmadden-electric · opened 1 day ago
- #30863 feat(mysql): the ORM and SQL builder read from MySQL, with every value sent as a prepared-statement parameterwmadden-electric · opened 1 day ago
- #30845 TML-3607: Field presets are removed, and each is written with a type constructor or type alias that stores the same contractwmadden-electric · opened 1 day ago
- #30867 fix(adapter-better-sqlite3): report SQLite's bind parameter limitericvtheg · opened 1 day ago
Recently merged
- #30858 TML-3713: contract infer, contract print, the Prisma 7 reader and orm init write the convenience date and time typeswmadden-electric · merged 23 Oct 2026
- #30834 TML-3709: PostgreSQL's explicit date and time types name their values, read ISO strings on every server, and get the design for convenience typeswmadden-electric · merged 23 Oct 2026
- #30851 TML-3418: PostgreSQL's string date and time types read ISO 8601 on every serverwmadden-electric · merged 23 Oct 2026
- #30839 TML-3719: An adopted Prisma 7 schema fills @default(now()) on create in UTC, as Prisma 7 didwmadden-electric · merged 23 Oct 2026
- #30844 TML-3711: Every explicit PostgreSQL date and time type names the value it reads, and timestamp and interval get the missing codecswmadden-electric · merged 23 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- wmadden-electric82 commits · 82%
- StevenMcClankerton18 commits · 18%
Of the 100 most recent commits.
Issues
- Open
- 2,804
- issues and pull requests, as GitHub counts them
- Median time to close
- 34 days
- from 1 closed of the 21 latest
- Awaiting first reply
- 0
- of 20 open among the 21 latest
- Oldest open
- 7.3 years
Most wanted
- #28845 Prisma 7 performance is actually worse than Prisma 698 reactions · 57 comments
- #28110 Bun driver adapter27 reactions · 13 comments
- #15306 Provide precompiled binaries for Windows on ARM4 reactions · 20 comments
Rates come from the 21 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
72
Packages checked
npm
22
Direct packages checked
listed in the manifest
50
Transitive packages checked
pulled in by other packages
189
External imports
outside packages the code imports
License compatibility
Repo license: Apache-2.0 · 18 deps checked · 0 potential conflicts.
License
Apache-2.0
License
Permissive
Family
0
License conflicts in dependencies
18 dependencies checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms. Apache-2.0 also grants a patent licence.