Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
By Sarah Gooding - Sep 18, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@whenlabs/anvil
Advanced tools
@whenlabs/anvil
Prisma migration safety analyzer — flags destructive ops, non-concurrent indexes, lock-time risks, and nullable gotchas.
@whenlabs/anvil
Prisma migration safety analyzer — flags destructive ops, non-concurrent indexes, lock-time risks, and nullable gotchas.
npx @whenlabs/anvil check
Primary installation target is a GitHub Action; see the repo README at https://github.com/WhenLabs-org/anvil for the full docs.
This package is a thin dispatcher around a per-platform binary shipped via
optionalDependencies. If you installed with --no-optional, reinstall with
--include=optional so the right binary lands.
FAQs
Prisma migration safety analyzer — flags destructive ops, non-concurrent indexes, lock-time risks, and nullable gotchas.
The npm package @whenlabs/anvil receives a total of 3 weekly downloads. As such, @whenlabs/anvil popularity was classified as not popular.
We found that @whenlabs/anvil demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 26 Apr 2026
Related posts
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
By Karlo Zanki - Sep 17, 2026
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
By Sarah Gooding - Sep 16, 2026