
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
ezorm is the published CLI package for Ezorm workflows.
npx ezorm --help
npm install ezorm
ezorm init [--ts|--js]
ezorm migrate generate [name]
ezorm migrate apply
ezorm migrate status
ezorm migrate resolve --applied <filename>
ezorm migrate resolve --rolled-back <filename>
ezorm db pull
ezorm db push
Start with the scaffold:
npx ezorm init
Supported config filenames:
ezorm.config.tsezorm.config.mtsezorm.config.ctsezorm.config.mjsezorm.config.jsezorm.config.cjsConfig files must export:
databaseUrlmodelsmodelPathsmigrationsDirWhen models is omitted, the CLI scans modelPaths for files containing @Model or Model(...) and derives the schema from the discovered model metadata. Generated configs prefer src/models or models, and broad modelPaths values such as ["src"] or ["."] may import any matching module under those roots. Prefer narrow model roots or an explicit models array when you need predictable, side-effect-free loading.
TypeScript scaffolds write ezorm.config.ts, ensure experimentalDecorators and emitDecoratorMetadata are enabled in tsconfig.json, default modelPaths to ["src/models"] when src/ exists or ["models"] otherwise, and create an example Todo model when the project does not already contain one.
Schema-producing commands fail fast when a loaded model resolves to incomplete metadata, such as no fields or no single-column primary key. If migrate generate, migrate status, or db push report invalid model metadata, check that your decorators executed, the model is loaded through a supported TypeScript or JavaScript entrypoint, and TypeScript decorator settings are enabled.
JavaScript scaffolds write ezorm.config.mjs for ESM packages and ezorm.config.cjs otherwise. The generated JavaScript Todo example uses direct decorator function calls so it can run without TypeScript syntax.
migrations/ is the default migration directory. Set migrationsDir in the config to override it.
npx ezorm init
npx ezorm migrate generate init
npx ezorm migrate apply
npx ezorm migrate status
npx ezorm db pull
npx ezorm db push
db push is the direct additive schema-sync shortcut for development. migrate resolve only reconciles migration history; it does not execute SQL.
For the TypeScript APIs behind Ezorm applications, see the repository root README and the @ezorm/* packages.
FAQs
Ezorm CLI for migrations and database workflows.
We found that ezorm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.