registry / @open-keystone/adapter-prisma / 4.0.36

@open-keystone/adapter-prisma@4.0.36

KeystoneJS Prisma Database Adapter

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 25.1 KB of source

Source & flagged code

3 flagged

lib/adapter-prisma.jsView file

Lines 1-23javascript

1const fs = require('fs');

2const path = require('path');

3const crypto = require('crypto');

4const { execSync } = require('child_process');

5const cuid = require('cuid');

High

Child Process

Package source references child process execution.

lib/adapter-prisma.jsView on unpkg · L3

6const {

7 BaseKeystoneAdapter,

8 BaseListAdapter,

9 BaseFieldAdapter,

10} = require('@open-keystone/keystone');

11const { defaultObj, mapKeys, identity, flatten } = require('@open-keystone/utils');

13const lastAppliedSchema = new Map();

15class PrismaAdapter extends BaseKeystoneAdapter {

16 constructor() {

17 super(...arguments);

18 this.listAdapterClass = PrismaListAdapter;

19 this.name = 'prisma';

20 this.provider = this.config.provider || 'postgresql';

21 this.migrationMode = this.config.migrationMode || 'dev';

23 this.getPrismaPath = this.config.getPrismaPath || (() => '.prisma');

Lines 53-93javascript

53 fs.writeFileSync(this.schemaPath, prismaSchema);

54 this._runPrismaCmd('format');

55 const formattedSchema = fs.readFileSync(this.schemaPath, { encoding: 'utf-8' });

57 const formattedHash = crypto.createHash('sha256').update

index.jsView file

Lines 1-4javascript

1const { PrismaAdapter, PrismaListAdapter, PrismaFieldAdapter } = require('./lib/adapter-prisma');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L1

3module.exports = { PrismaAdapter, PrismaListAdapter, PrismaFieldAdapter };

Source & flagged code

3 flagged · loading source

lib/adapter-prisma.jsView file

3const crypto = require('crypto'); L4: const { execSync } = require('child_process'); L5: const cuid = require('cuid');

High

Child Process

Package source references child process execution.

lib/adapter-prisma.jsView on unpkg · L3

73_runPrismaCmd(cmd) { L74: // speed up npx command L75: const localBin = path.join(__dirname, '../node_modules/.bin/prisma'); ... L83: L84: return execSync(`${bin} ${cmd} --schema ${this.schemaPath}`, { L85: env: { ...process.env, DATABASE_URL: this._url() },

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/adapter-prisma.jsView on unpkg · L73

index.jsView file

1const { PrismaAdapter, PrismaListAdapter, PrismaFieldAdapter } = require('./lib/adapter-prisma'); L2:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L1

Findings

2 High3 Medium2 Low

HighChild Processlib/adapter-prisma.js

HighRuntime Package Installlib/adapter-prisma.js

MediumDynamic Requireindex.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

3 flagged

lib/adapter-prisma.jsView file

Lines 1-23javascript

1const fs = require('fs');

2const path = require('path');

3const crypto = require('crypto');

4const { execSync } = require('child_process');

5const cuid = require('cuid');

High

Child Process

Package source references child process execution.

lib/adapter-prisma.jsView on unpkg · L3

6const {

7 BaseKeystoneAdapter,

8 BaseListAdapter,

9 BaseFieldAdapter,

10} = require('@open-keystone/keystone');

11const { defaultObj, mapKeys, identity, flatten } = require('@open-keystone/utils');

13const lastAppliedSchema = new Map();

15class PrismaAdapter extends BaseKeystoneAdapter {

16 constructor() {

17 super(...arguments);

18 this.listAdapterClass = PrismaListAdapter;

19 this.name = 'prisma';

20 this.provider = this.config.provider || 'postgresql';

21 this.migrationMode = this.config.migrationMode || 'dev';

23 this.getPrismaPath = this.config.getPrismaPath || (() => '.prisma');

Lines 53-93javascript

53 fs.writeFileSync(this.schemaPath, prismaSchema);

54 this._runPrismaCmd('format');

55 const formattedSchema = fs.readFileSync(this.schemaPath, { encoding: 'utf-8' });

57 const formattedHash = crypto.createHash('sha256').update

index.jsView file

Lines 1-4javascript

1const { PrismaAdapter, PrismaListAdapter, PrismaFieldAdapter } = require('./lib/adapter-prisma');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L1

3module.exports = { PrismaAdapter, PrismaListAdapter, PrismaFieldAdapter };