improvement(audits): skip the sql-date-binding parse for files without drizzle-orm

[waleedlatif1]

Summary

• check:sql-date-binding Babel-parsed all 13,941 source files under apps, packages, and scripts. A violation can only come from an sql tag resolved through a drizzle-orm import, and both the static (collectSqlBindings) and dynamic (isDrizzleImportCall) resolvers match the specifier as a string literal — so a file that never names the module cannot bind the tag and cannot violate.
• Only ~590 of those files name it. Skip the parse for the other 92% of bytes.
• Audit goes ~4.5s → ~0.8s (5.7x), dropping out of the four slowest audits. check:audits goes 6.0s → 5.3s wall, 38.0s → 32.9s serial.
• Output is unchanged.

Type of Change

• Improvement (performance)

Testing

Tested manually:

• Clean tree before/after both report ✓ 13941 files bind every sql-template Date through a column encoder, warm timings 4.38s/4.63s → 0.82s/0.76s.
• Planted a real violation (sql\... ${aDate}`in a file importingsqlfromdrizzle-orm`) and confirmed it is still reported with exit 1.
• bun run check:audits and bunx biome check pass.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview	Aug 11, 2026 7:16pm

[cursor]

PR Summary

^{Cursor Bugbot is generating a summary for commit 38d5b01. Configure here.}

[waleedlatif1]

@greptile

[waleedlatif1]

@cursor review

[greptile-apps]

Greptile Summary

This PR accelerates the SQL Date-binding audit by parsing only source files whose raw text names drizzle-orm.

• Adds a lightweight mayBindDrizzleSql prefilter.
• Reuses each file’s loaded source when invoking the existing analyzer.
• Preserves violation detection for all current Drizzle imports in the repository.

Confidence Score: 5/5

The PR appears safe to merge because the new prefilter retains every currently reachable Drizzle SQL-binding analysis path.

The raw substring check includes all existing drizzle-orm import spellings in the repository, while skipped files cannot currently bind the audited SQL tag.

Important Files Changed

Filename	Overview
scripts/check-sql-date-binding.ts	Adds a conservative source-text prefilter before Babel parsing; no actionable defect was established for the repository’s current sources.

_{Reviews (2): Last reviewed commit: "improvement(audits): skip the sql-date-b..." | Re-trigger Greptile}

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 0ee302b. Configure here.}