
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
@dbdiff/cli
Advanced tools
Compare MySQL, Postgres or SQLite databases & automatically create schema & data change migrations
Compare MySQL, Postgres or SQLite databases and automatically create schema & data change migrations — no PHP required.
# Global install
npm install -g @dbdiff/cli
# One-off via npx
npx @dbdiff/cli --help
# Project dev dependency
npm install --save-dev @dbdiff/cli
# Install from GitHub Packages (mirror registry)
npm install -g @dbdiff/cli --registry=https://npm.pkg.github.com
# Schema diff between two MySQL databases
dbdiff server1.db1:server2.db2
# Full diff (schema + data) with Supabase Postgres
dbdiff --supabase --server1=user:pass@host:5432 db1:db2
# Generate migration files
dbdiff --type=both --output=migrations/ server1.db1:server2.db2
@dbdiff/cli distributes a platform-native self-contained binary — a
static PHP interpreter with all required extensions baked in, combined with
the DBDiff PHAR. There is no PHP installation, no Composer, and no runtime
dependencies required on the end-user machine.
npm automatically downloads only the binary for your platform (~10–15 MB):
| Platform | Package |
|---|---|
| Linux x64 (glibc) | @dbdiff/cli-linux-x64 |
| Linux arm64 (glibc) | @dbdiff/cli-linux-arm64 |
| Linux x64 (musl/Alpine) | @dbdiff/cli-linux-x64-musl |
| Linux arm64 (musl/Alpine) | @dbdiff/cli-linux-arm64-musl |
| macOS Intel | @dbdiff/cli-darwin-x64 |
| macOS Apple Silicon | @dbdiff/cli-darwin-arm64 |
| Windows x64 | @dbdiff/cli-win32-x64 |
| Windows arm64 | @dbdiff/cli-win32-arm64 |
MIT
FAQs
Compare MySQL, Postgres or SQLite databases & automatically create schema & data change migrations
The npm package @dbdiff/cli receives a total of 147 weekly downloads. As such, @dbdiff/cli popularity was classified as not popular.
We found that @dbdiff/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.