
Security News
Rust RFC Proposes a Security Tab on crates.io for RustSec Advisories
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.
@prisma/prisma-schema-wasm
Advanced tools
This directory only contains build logic to package the prisma-fmt engine
into a Node package as a Wasm module. All the functionality is implemented in
other parts of prisma-engines.
The published NPM package is internal to Prisma. Its API will break without prior warning.
node -e "const prismaSchema = require('@prisma/prisma-schema-wasm'); console.log(prismaSchema.version())"
rustup, cargo install and apt, with underspecified system dependencies and best-effort version pinning.When implementing features for language-tools in prisma-engines, to sync with your local dev environment for the language-server, one can do the following:
# Install the latest Rust version with `rustup`
# or update the latest Rust version with `rustup`
rustup update
rustup target add wasm32-unknown-unknown
cargo update -p wasm-bindgen
# Check the version defined in `prisma-schema-wasm/cargo.toml` for `wasm-bindgen` and replace `version` below:
cargo install -f wasm-bindgen-cli@version
./prisma-schema-wasm/scripts/update-schema-wasm.sh
This script has the following expectations:
language-tools is in the same dir as prisma-engines
dir/{prisma-engines,language-tools}prisma-engines root folderFAQs
The Wasm package for prisma-fmt
The npm package @prisma/prisma-schema-wasm receives a total of 377,619 weekly downloads. As such, @prisma/prisma-schema-wasm popularity was classified as popular.
We found that @prisma/prisma-schema-wasm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.

Security News
/Research
Socket found a Rust typosquat (finch-rust) that loads sha-rust to steal credentials, using impersonation and an unpinned dependency to auto-deliver updates.

Research
/Security Fundamentals
A pair of typosquatted Go packages posing as Google’s UUID library quietly turn helper functions into encrypted exfiltration channels to a paste site, putting developer and CI data at risk.