Skip to content

SlowQL v2.0.0

Latest
Latest

Choose a tag to compare

View all tags
@makroumi makroumi released this 30 Jun 00:30
· 11 commits to main since this release
v2.0.0
1c07708

SlowQL v2.0.0

SlowQL v2 is a full Rust rewrite of the project focused on correctness, performance, and production usability.

Highlights

  • Rewritten in Rust
  • 282+ built-in rules across security, performance, reliability, quality, cost, and compliance
  • Three confidence modes:
    • proven for structurally verified findings
    • contextual for findings that depend on project/runtime context
    • advisory for best-practice and maintainability hints
  • Zero false positives in proven mode across a hardened 28-repository corpus
  • Offline analysis with no database connection required
  • Application code SQL extraction for Python, TypeScript/JavaScript, Java/Kotlin, Go, Ruby, C#, and MyBatis XML
  • Schema-aware validation
  • Safe autofix with preview and backup support

Performance

Large-repository performance was significantly improved during the v2 hardening cycle:

  • ClickHouse scan reduced from 836s to about 14s
  • nocodb scan reduced from 776s to about 0.16s
  • JSON output redesigned to avoid massive payload overhead

Proven-mode hardening

SlowQL v2 was validated against 28 open-source repositories, including:

  • Django
  • Rails
  • Prisma
  • Supabase
  • GraphQL Engine
  • ClickHouse
  • Spark
  • Vitess
  • Citus
  • TimescaleDB
  • Liquibase
  • Flyway
  • sqlfluff
  • sqlmap

Result:

  • zero false positives in proven mode
  • zero confirmed false negatives in the hardened corpus

Breaking changes from v1

  • SlowQL is now a Rust binary, not the previous Python implementation
  • Old Python/LSP-specific components were removed from the repository for this release
  • Confidence levels are now first-class and affect default reporting behavior
  • Default behavior is optimized for trusted proven-mode output

Installation

From source

git clone https://github.com/slowql/slowql.git
cd slowql
cargo install --path .

Docker

docker run --rm -v $(pwd):/src makroumi/slowql /src

Quick Start

# Proven mode (default)
slowql src/

# Contextual mode
slowql src/ --min-confidence contextual

# Advisory mode
slowql src/ --min-confidence advisory

# With schema validation
slowql src/ --schema db/schema.sql

Documentation

  • README: project overview and usage
  • docs/: updated for v2.0.0
  • CHANGELOG.md: full release details

Thanks

Thank you to everyone testing, reporting issues, and helping validate the v2 rewrite.

Assets 2
Loading
0 Join discussion