← Back to all sparks
E

Evidence

ANALYTICS
Velocity0.0

Code-based BI and reporting tool

Evidence's last release was a February CVE sweep that also removed Evidence Cloud references.

bi-as-codesqldependenciessecuritymaintenance
◆Current state
Every tracked Evidence release is from a single day, February 6, 2026: a coordinated patch across the SDK, preprocessor, universal SQL layer and database connectors to pick up dependency updates for CVEs. The SDK patch also removes references to Evidence Cloud.
◆Where it's heading
Nothing has shipped in the eight months since, so the open-source BI-as-code framework looks to be in maintenance mode. Removing Evidence Cloud references suggests the hosted offering has been dropped or separated, though the entries do not say why.
◆Prediction
It is unclear from the entries whether active development will resume; the next release is more likely another dependency or security patch than new features.

◆Recent moves

  1. 8mo ago

    SQLite connector picks up CVE-patched shared dependency

    The SQLite connector picks up the patched shared db-commons package, one of a dozen lockstep bumps from the February CVE sweep.

    View source ↗
  2. 8mo ago

    Preprocessor package updates to resolve CVEs

    The preprocessor updates packages to resolve CVEs, with no change to how Evidence builds pages.

    View source ↗
  3. 8mo ago

    Trino connector picks up CVE-patched shared dependency

    The Trino connector gets the same db-commons dependency bump as every other connector in the sweep.

    View source ↗
  4. 8mo ago

    SDK patches CVEs and removes Evidence Cloud references

    Beyond CVE updates, the SDK removes references to Evidence Cloud. It is a small change, but it is the one hint in this batch that the hosted product is no longer part of the open-source story.

    View source ↗
  5. 8mo ago

    Redshift connector picks up CVE-patched dependencies

    The Redshift connector inherits the patched db-commons and Postgres packages, a dependency-only release.

    View source ↗
  6. 8mo ago

    Snowflake connector picks up CVE-patched shared dependency

    The Snowflake connector gets the shared db-commons bump, with no user-facing change.

    View source ↗