Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@prisma/codemods
Advanced tools
A Collection of Codemods for Prisma
Usage
$ npx @prisma/codemods <transform> <path> <...options>
transform One of the choices from https://github.com/prisma/codemods#transforms
path Directory of your app. i.e ./my-awesome-project
Options
-(-f)orce Bypass Git safety checks and forcibly run codemods
-(-s)chemaPath Specify a path to your ./prisma/schema.prisma
-(-d)ry Dry run (no changes are made to files)
-(-p)rint Print transformed files to your terminal
--instanceNames=client Useful when importing an already instantiated (i.e import client from './client')
<transform> | Description | Example |
---|---|---|
namespace | Codemod for @prisma/client namespace change | npx @prisma/codemods namespace ./my-project |
findUnique | Converts prisma.x.findOne to prisma.x.findUnique | npx @prisma/codemods findUnique ./my-project |
to$ | to$: Converts deprecated prisma.x methods to prisma.$x | npx @prisma/codemods to$ ./my-project |
update-2.12 | Includes namespace /findUnique /to$ | npx @prisma/codemods update-2.12 ./my-project |
git clone https://github.com/prisma/codemods.git
cd codemods
yarn && yarn watch
In a separate terminal you can then run
yarn cli --help
yarn test
FAQs
A collection of codemods for prisma
We found that @prisma/codemods demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.