drizzle-kit
Drizzle Kit is a CLI migrator tool for Drizzle ORM. It is probably the one and only tool that lets you completely automatically generate SQL migrations and covers ~95% of the common cases like deletions and renames by prompting user input. <https://github
76%
Total Score
healthy
Healthy: active releases and organization-backed maintenance outweigh workflow and license hygiene concerns.
Health Score Breakdown
The manifest declares MIT, while the repository license file was detected as Apache-2.0; the mismatch reduces licensing clarity even though both provide an explicit license.
The linked monorepo name does not match drizzle-kit and its README does not mention the package, leaving some uncertainty that the repository is the authoritative source.
This release is not a prerelease, but 95% of recent releases were prereleases, so the package’s versioning is less stable than ideal.
All five workflows were analyzed, but all 32 action references are unpinned and high-confidence template-injection and floating-image findings remain; no untrusted checkout or dangerous trigger was found to compound them.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tsx Version ^4.21.0 | — | — |
esbuild Version ^0.25.4 | — | — |
@drizzle-team/brocli Version ^0.10.2 | — | — |
@esbuild-kit/esm-loader Version ^2.5.5 | — | — |
Weekly Downloads
Info
- Last Published
- 22 days ago
- Created
- 5 years ago
- Unpacked Size
- 9.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.