Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@prisma/accelerate-contract
Advanced tools
⚠️ Warning: This package is intended for Prisma's internal use. Its release cycle does not follow SemVer, which means we might release breaking changes (change APIs, remove functionality) without any prior warning.
Accelerate has ownership of the DataProxyEngine
(now AccelerateEngine
). This
engine is handed over to the Client by the Accelerate extension. The Client uses
the engine to communicate with the Accelerate service. Accelerate uses the
Client to formulate and execute queries. This means we need some kind of
contract between the Client and the Accelerate service.
If the Client breaks this contract, that translates into a breaking change for
Accelerate users. This is why we need to be very careful when changing the
AccelerateEngine
and the AccelerateEngineConfig
.
Both @prisma/client
and @prisma/extension-accelerate
will both pin this
package to an agreed same specific version (eg. 5.10.0-dev.45). In turn this
will prevent @prisma/extension-accelerate
from deviating from the API provided
by @prisma/client
, and it will prevent @prisma/client
from introducing
backwards incompatible changes to the internal AccelerateEngineConfig
.
This is one safe-guard to catch breaking changes statically via TypeScript. That's in addition to running all our functional tests as usual.
This package contains the AccelerateEngineConfig
and AccelerateEngine
types.
They are the contract that the Client and the Accelerate extension agree upon.
FAQs
This package is intended for Prisma's internal use
The npm package @prisma/accelerate-contract receives a total of 1,568 weekly downloads. As such, @prisma/accelerate-contract popularity was classified as popular.
We found that @prisma/accelerate-contract demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.