Reading the repo — stats and the shipped feed land in about ten seconds…
A deterministic 0–100 hygiene score — README, license, CI, tests, docs, and freshness.
Who ships this repo — author concentration and the bus factor across the last 300 mainline commits.
How welcoming this repo is to contributors — issue throughput, close time, responsiveness, and good-first-issue count.
What this project is built on — dependency count by ecosystem, the license mix, and anything worth a legal look before you adopt it.
Whether this project's CI can be trusted — pass rate, run times, flaky runs, and which workflow is the weak link.
Grounded in drizzle-orm's README, structure, and recent commits — answers won't invent code they haven't seen.
A Monday email with what shipped, in plain English — no account needed.
Add drizzle-kit announcements system
Introduced a manifest-based announcement system for drizzle-kit that delivers versioned notices to users based on their installed version. The system is served from a CDN and includes documentation on schema, matching logic, and management procedures.
Lock npm version to major 11
Updated release workflows to pin npm installation to major version 11 instead of always using the latest version, preventing compatibility issues with npm 12.0.0 that lack sigstore support needed for publishing.
Add release workflow input options
The release workflow now supports manual input parameters allowing users to choose whether to publish to GitHub Packages instead of npm and to specify which packages to release.
Added Netlify DB driver support
Drizzle ORM now supports Netlify Database as a first-class driver, allowing developers to connect to Netlify DB instances using `drizzle('drizzle-orm/netlify-db')`. The implementation includes connection handling, migrations, and comprehensive test coverage. A bug fix for pg-native Pool detection in restricted environments is also included.
Security fix for SQL injection
Fixed a SQL injection vulnerability in `sql.identifier()` and `sql.as()` functions where values weren't being properly escaped. This release addresses CWE-89 by ensuring all values passed to these functions are now safely escaped.
Drizzle Kit dependency updates
Updated Drizzle Kit to version 0.31.10 with improved module loader support. The tool now uses `tsx` instead of `esbuild-register` for better compatibility with both ESM and CommonJS modules, added native support for Bun and Deno runtimes for faster startup, and updated the `hanji` library for enhanced terminal output handling. This also fixes an issue where pg-native Pool detection would break in environments with restricted `require()` access.
Add D1 binding support
Drizzle Kit now supports Cloudflare D1 databases via direct bindings, enabling seamless integration with D1 connections alongside existing SQLite drivers. This includes improved connection handling, batch transaction support, and authorization error management for D1's introspection limitations.
A floor, not a guess: counts only commits whose author, co-author trailer, or message explicitly credits an AI tool (Claude, Copilot, Cursor, aider, Codex…). Based on 30 mainline commits. Unattributed AI code isn't counted here — the full audit estimates that separately.
