Warp
Warp drops the terminal framing to bet on cloud software factories and agent orchestration
A side-by-side editorial comparison of Supabase and Drizzle ORM — release velocity, themes, recent moves, and the top alternatives to consider.
Supabase is reversing its biggest security default - public-schema tables no longer auto-exposed via PostgREST.
The headline shipping move is a deliberate change to Supabase's security posture: new projects can opt out of automatic Data API and GraphQL exposure for public-schema tables, with broader defaults flipping in May. Around it: an OAuth 2.1 compliance fix, an RLS Tester preview to make policy verification possible from the UI, and a steady drumbeat of platform improvements summarized in the monthly developer update.
Drizzle's v1.0 release candidates land a JIT mapper rework, new codecs, and a breaking casing API
Drizzle ORM is deep in its v1.0.0 release-candidate cycle, and the work is substantial. The rc.1 release reworked the query pipeline with opt-in JIT-compiled mappers and a new codec system — claiming a 25 to 30 percent latency reduction — added native Effect v4 support, a Netlify database driver, and a breaking redesign of the casing API. Subsequent RCs are porting those changes from PostgreSQL across to MySQL and SQLite, while the drizzle-kit side hardens migration commutativity and branch merging.
The headline shipping move is a deliberate change to Supabase's security posture: new projects can opt out of automatic Data API and GraphQL exposure for public-schema tables, with broader defaults flipping in May. Around it: an OAuth 2.1 compliance fix, an RLS Tester preview to make policy verification possible from the UI, and a steady drumbeat of platform improvements summarized in the monthly developer update.
Supabase is rebuilding the security defaults that made it fast to start with but easy to misconfigure. Combine the no-auto-expose change with the RLS Tester preview and the direction is clear: the platform is moving from convention-based exposure to explicit, testable access control. The OAuth compliance fix and developer updates suggest steady investment in standards conformance rather than new product surface this window.
Expect the no-auto-expose default to apply to existing projects (with a long opt-out runway), and the RLS Tester to graduate from preview into the dashboard as a first-class panel. Continued breaking-change drumbeat tied to OAuth/OIDC compliance is likely.
Drizzle ORM is deep in its v1.0.0 release-candidate cycle, and the work is substantial. The rc.1 release reworked the query pipeline with opt-in JIT-compiled mappers and a new codec system — claiming a 25 to 30 percent latency reduction — added native Effect v4 support, a Netlify database driver, and a breaking redesign of the casing API. Subsequent RCs are porting those changes from PostgreSQL across to MySQL and SQLite, while the drizzle-kit side hardens migration commutativity and branch merging.
The path to 1.0 is a methodical internals overhaul: prove the codec and mapper system on Postgres, then replicate it dialect by dialect (MySQL in rc.3, SQLite next), with matching Effect support to follow. Alongside, drizzle-kit is making the migration system safe under branching. Expect more RCs finishing the dialect rollout before a stable 1.0, with breaking changes front-loaded into this cycle.
Next releases will likely bring the SQLite rework and Effect support for MySQL and SQLite, mirroring the Postgres pattern, followed by a stable 1.0 once all dialects are aligned. Further breaking changes are most probable in the casing and RQB areas while the API settles.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Supabase or Drizzle ORM.
Warp drops the terminal framing to bet on cloud software factories and agent orchestration
Unleash leans hard into AI-agent governance and self-hosting as its crawled feed fills with thought-leadership.
GitHub spends the week hardening enterprise governance and supply-chain security.
Resend keeps widening from a raw email API into agent-native tooling and audience management.
Very high-cadence sandbox infra building the primitives agents need to run code
Rootly is wiring an AI agent and enterprise controls into the incident-response core.
See all Supabase alternatives → · See all Drizzle ORM alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Supabase is currently shipping more aggressively (velocity 6.3 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Supabase is currently shipping more aggressively (velocity 6.3 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Supabase alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Supabase alternatives" section above for the current picks, or visit /alternatives/supabase for the full list with editorial commentary on each.
Top Drizzle ORM alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Drizzle ORM alternatives" section above for the current picks, or visit /alternatives/drizzle for the full list with editorial commentary on each.