locksafe 0.1.0

Postgres migration safety analyzer — catch dangerous operations before they run

LockSafe AI

LockSafe AI is a CLI tool that analyzes PostgreSQL migration files and detects operations that can cause production downtime or data loss.

It helps you catch unsafe migrations before they are applied.

---

Installation

pip install locksafe

Requires Python 3.12+

---

Usage

Analyze a migration file:

locksafe analyze migration.sql

---

Example

Input

CREATE INDEX idx_users_email ON users(email);

ALTER TABLE users ADD COLUMN status TEXT NOT NULL;

TRUNCATE payments;

Output

🔐 LockSafe Analysis
File: migration.sql
Statements: 3 │ Critical: 2 │ High: 0 │ Medium: 0 │ Low: 0

⚠ Migration risks detected

🔴 [CRITICAL] Statement 1
↳ CREATE INDEX without CONCURRENTLY on table 'users'

🔴 [CRITICAL] Statement 2
↳ ADD COLUMN NOT NULL without DEFAULT causes table rewrite

🔴 [CRITICAL] Statement 3
↳ TRUNCATE destroys all rows in payments

---

Severity Levels

Level	Meaning
🔴 CRITICAL	High risk of downtime or data loss
🟠 HIGH	Likely to cause production issues
🟡 MEDIUM	May cause performance or locking issues
🔵 LOW	Informational or minor risk

---

Exit Codes

LockSafe returns exit codes for CI/CD usage:

Code	Meaning
0	No issues found
1	Issues detected
2	SQL parsing error

---

Debug Mode

Enable debug logs:

locksafe --debug analyze migration.sql

---

CI/CD Usage

Use LockSafe in your pipeline to block unsafe migrations:

locksafe analyze migrations/0042_add_user_index.sql

If risks are detected, the command exits with code 1.

---

Tips

• Always review CRITICAL findings before running migrations
• Use CONCURRENTLY for index operations on large tables
• Avoid schema changes that rewrite entire tables in production

---

License

MIT License