sverklo audit
D
Overall Health
C
Dead code
23% orphan symbols (408/1805)
D
Circular deps
8 cycles detected
C
Coupling
max fan-in: 35 (drizzle-orm/src/pg-core/columns/common.ts)
F
Security
146 concerns found
Overview
- 966 files indexed
- 8147 code symbols extracted
- 72523 symbol references tracked
- 0 active memories (0 core, 0 stale)
- Languages: typescript (937), javascript (29)
God Nodes (most-referenced symbols)
These are the symbols your codebase depends on most. Changes here have the largest blast radius.
- primaryKey — 2955 references
- select — 2255 references
- text — 1737 references
- double — 1584 references
- int — 1572 references
- integer — 1209 references
- run — 1134 references
- pgTable — 652 references
- serial — 574 references
- sqliteTable — 529 references
Hub Files (highest PageRank)
Core architectural files — imported by many others.
drizzle-kit/src/global.ts(1.00)drizzle-orm/src/pg-core/columns/common.ts(0.89)drizzle-orm/src/singlestore-core/columns/common.ts(0.75)drizzle-orm/src/mysql-core/columns/common.ts(0.70)drizzle-orm/src/singlestore-core/unique-constraint.ts(0.70)drizzle-kit/tests/schemaDiffer.ts(0.66)drizzle-orm/src/mysql-core/unique-constraint.ts(0.63)drizzle-orm/src/gel-core/columns/common.ts(0.61)drizzle-kit/src/cli/validations/common.ts(0.60)drizzle-orm/src/gel-core/unique-constraint.ts(0.56)
Orphans (potential dead code)
Named functions with zero detected references. Could be dead code, public API exports, or referenced dynamically.
- assertExists —
drizzle-kit/src/cli/utils.ts:4 - checkPackage —
drizzle-kit/src/cli/utils.ts:23 - mysqlSchemaSuggestions —
drizzle-kit/src/cli/commands/migrate.ts:440 - singleStoreSchemaSuggestions —
drizzle-kit/src/cli/commands/migrate.ts:589 - freeeeeeze —
drizzle-kit/src/cli/commands/migrate.ts:1057 - prepareSnapshotFolderName —
drizzle-kit/src/cli/commands/migrate.ts:1485 - SingleStoreCountBuilder —
drizzle-orm/src/singlestore-core/query-builders/count.ts:7 - DefaultViewBuilderCore —
drizzle-orm/src/pg-core/view.ts:21 - MaterializedViewBuilderCore —
drizzle-orm/src/pg-core/view.ts:154 - PgMaterializedView —
drizzle-orm/src/pg-core/view.ts:340
Coupling (high-PageRank files)
drizzle-kit/src/global.ts(1.00)drizzle-orm/src/pg-core/columns/common.ts(0.89)drizzle-orm/src/singlestore-core/columns/common.ts(0.75)drizzle-orm/src/mysql-core/columns/common.ts(0.70)drizzle-orm/src/singlestore-core/unique-constraint.ts(0.70)
Circular Dependencies (8 cycles)
- drizzle-kit/src/cli/validations/common.ts -> drizzle-kit/src/cli/validations/outputs.ts -> drizzle-kit/src/cli/validations/common.ts
- drizzle-kit/src/cli/views.ts -> drizzle-kit/src/utils.ts -> drizzle-kit/src/cli/views.ts
- drizzle-orm/src/pg-core/query-builders/query-builder.ts -> drizzle-orm/src/pg-core/query-builders/select.ts -> drizzle-orm/src/pg-core/utils.ts -> drizzle-orm/src/pg-core/view.ts -> drizzle-orm/src/pg-core/query-builders/query-builder.ts
- drizzle-orm/src/gel-core/query-builders/query-builder.ts -> drizzle-orm/src/gel-core/query-builders/select.ts -> drizzle-orm/src/gel-core/utils.ts -> drizzle-orm/src/gel-core/view.ts -> drizzle-orm/src/gel-core/query-builders/query-builder.ts
- drizzle-kit/src/cli/commands/migrate.ts -> drizzle-kit/src/snapshotsDiffer.ts -> drizzle-kit/src/sqlgenerator.ts -> drizzle-kit/src/cli/commands/migrate.ts
- drizzle-kit/src/cli/commands/sqlitePushUtils.ts -> drizzle-kit/src/sqlgenerator.ts -> drizzle-kit/src/jsonStatements.ts -> drizzle-kit/src/cli/commands/sqlitePushUtils.ts
- drizzle-kit/src/jsonStatements.ts -> drizzle-kit/src/snapshotsDiffer.ts -> drizzle-kit/src/sqlgenerator.ts -> drizzle-kit/src/jsonStatements.ts
- drizzle-kit/src/cli/commands/migrate.ts -> drizzle-kit/src/snapshotsDiffer.ts -> drizzle-kit/src/cli/commands/migrate.ts
Security Issues (146 found)
High (74)
- SQL injection (template literal) —
drizzle-orm/src/libsql/session.ts:153 await this.session.run(sql.raw(savepoint ${savepointName}));- SQL injection (template literal) —
drizzle-orm/src/libsql/session.ts:156 await this.session.run(sql.raw(release savepoint ${savepointName}));- SQL injection (template literal) —
drizzle-orm/src/libsql/session.ts:159 await this.session.run(sql.raw(rollback to savepoint ${savepointName}));- SQL injection (template literal) —
drizzle-orm/src/sql-js/session.ts:56 this.run(sql.raw(begin${config.behavior ?${config.behavior}: ''}));- SQL injection (template literal) —
drizzle-orm/src/expo-sqlite/session.ts:67 this.run(sql.raw(begin${config?.behavior ? ' ' + config.behavior : ''}));- SQL injection (template literal) —
drizzle-orm/src/op-sqlite/session.ts:79 this.run(sql.raw(begin${config?.behavior ? ' ' + config.behavior : ''}));- SQL injection (template literal) —
drizzle-orm/src/sqlite-proxy/session.ts:96 await this.run(sql.raw(begin${config?.behavior ? ' ' + config.behavior : ''}));- SQL injection (template literal) —
drizzle-orm/src/d1/session.ts:116 await this.run(sql.raw(begin${config?.behavior ? ' ' + config.behavior : ''}));- SQL injection (template literal) —
drizzle-orm/src/sql-js/session.ts:77 tx.run(sql.raw(savepoint ${savepointName}));- SQL injection (template literal) —
drizzle-orm/src/sql-js/session.ts:80 tx.run(sql.raw(release savepoint ${savepointName}));- ...and 64 more
Low (72)
- Excessive console.log —
drizzle-kit/src/cli/schema.ts:103 console.log(- Excessive console.log —
drizzle-kit/src/cli/schema.ts:134 console.log(- Excessive console.log —
drizzle-kit/src/cli/schema.ts:141 console.log(- Excessive console.log —
drizzle-kit/src/cli/schema.ts:205 console.log(- Excessive console.log —
drizzle-kit/src/cli/schema.ts:327 console.log(- Excessive console.log —
drizzle-kit/src/cli/schema.ts:334 console.log(- Excessive console.log —
drizzle-kit/src/cli/schema.ts:390 console.log(- Excessive console.log —
drizzle-kit/src/cli/schema.ts:422 console.log("Everything's fine 🐶🔥");- Excessive console.log —
drizzle-kit/src/cli/schema.ts:460 console.log(- Excessive console.log —
drizzle-kit/src/cli/schema.ts:526 console.log(- ...and 62 more
Suggested Next Steps
- Before refactoring primaryKey, run
sverklo_impactto see the 2955 call sites drizzle-kit/src/global.tsis your most-imported file — changes here cascade widely- 15+ potential orphans detected — audit for dead code