Reading the repo — stats and the shipped feed land in about ten seconds…
A deterministic 0–100 hygiene score — README, license, CI, tests, docs, and freshness.
Who ships this repo — author concentration and the bus factor across the last 300 mainline commits.
How welcoming this repo is to contributors — issue throughput, close time, responsiveness, and good-first-issue count.
What this project is built on — dependency count by ecosystem, the license mix, and anything worth a legal look before you adopt it.
Whether this project's CI can be trusted — pass rate, run times, flaky runs, and which workflow is the weak link.
Grounded in drizzle-orm's README, structure, and recent commits — answers won't invent code they haven't seen.
A Monday email with what shipped, in plain English — no account needed.
Showing raw commit titles for the newest commits. Sign in to generate AI summaries.
[All-kit]: Warn when journal timestamps can cause migrations to be skipped (#6301)
Add drizzle-kit announcements system
Introduced a manifest-based announcement system for drizzle-kit that delivers versioned notices to users based on their installed version. The system is served from a CDN and includes documentation on schema, matching logic, and management procedures.
Lock npm version to major 11
Updated release workflows to pin npm installation to major version 11 instead of always using the latest version, preventing compatibility issues with npm 12.0.0 that lack sigstore support needed for publishing.
Add release workflow input options
The release workflow now supports manual input parameters allowing users to choose whether to publish to GitHub Packages instead of npm and to specify which packages to release.
Added Netlify DB driver support
Drizzle ORM now supports Netlify Database as a first-class driver, allowing developers to connect to Netlify DB instances using `drizzle('drizzle-orm/netlify-db')`. The implementation includes connection handling, migrations, and comprehensive test coverage. A bug fix for pg-native Pool detection in restricted environments is also included.
Security fix for SQL injection
Fixed a SQL injection vulnerability in `sql.identifier()` and `sql.as()` functions where values weren't being properly escaped. This release addresses CWE-89 by ensuring all values passed to these functions are now safely escaped.
A floor, not a guess: counts only commits whose author, co-author trailer, or message explicitly credits an AI tool (Claude, Copilot, Cursor, aider, Codex…). Based on 30 mainline commits. Unattributed AI code isn't counted here — the full audit estimates that separately.
