
Security News
New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.
@prisma-next/contract-authoring
Advanced tools
Target-agnostic authored storage descriptor types for Prisma Next
Status: Shared descriptor types for family-specific contract authoring
This package holds the small, target-neutral descriptor vocabulary shared by Prisma Next authoring surfaces, targets, extensions, and ID helpers.
@prisma-next/contract-authoring is not the active TypeScript contract DSL. It exists to give multiple packages a common way to describe authored storage details without depending on SQL-specific packages.
IndexDef captures index column lists plus optional name, using, and configForeignKeyDefaultsState captures default FK materialization choices shared by authoring surfaces@prisma-next/sql-contract-ts a target-neutral descriptor layerColumnTypeDescriptor lives in @prisma-next/framework-components/codec alongside the codec types.
This package is the extracted shared descriptor layer from the contract authoring split. The current SQL TypeScript authoring implementation lives in @prisma-next/sql-contract-ts.
defineContract, field, model, rel, or any lowering pipeline@prisma-next/sql-* or other family-specific modulesIndexDefForeignKeyDefaultsStateThis package is intended for internal composition. End-user contract authoring code should import from the family-specific surface, such as @prisma-next/sql-contract-ts, rather than from this package directly.
@prisma-next/sql-contract-ts - SQL TypeScript contract authoring surfaceFAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.

Security News
The White House’s Gold Eagle Initiative aims to coordinate AI-discovered vulnerabilities, validate findings, and accelerate patching across critical software.

Security News
A Shai-Hulud infection exposed Suno's source code, which shows the AI music startup stream-ripped tracks to train its models.