GoKawiilTypebase launches as TypeScript-based backend alternative to Supabase's RLS model
A new open-source project called Typebase proposes replacing SQL-based Row Level Security policies with backend logic written entirely in TypeScript, organized in a single folder. The developer argues traditional RLS policies are implicit, not type-checked by editors, and prone to silently granting overly broad access when new columns are added or when subtle errors go unnoticed during code review.
GoKawiil's interpretation of the reporting above, not reported fact.
Database security misconfigurations are a leading cause of data leaks, and RLS policies written in SQL are notoriously hard to audit since they don't benefit from compiler checks or IDE tooling that catches mistakes early. By moving access-control logic into TypeScript, Typebase appeals to developers who want stronger static guarantees and want backend permission logic to evolve safely alongside their application code, especially relevant as AI coding assistants increasingly generate unreviewed policy changes.
- Typebase replaces SQL Row Level Security with TypeScript-based access control logic.
- The project targets weaknesses in RLS: implicit permissions and lack of compile-time checks.
- It reflects growing developer interest in type-safe, single-codebase backend architectures.
O'Reilly "Programming TypeScript" by Boris Cherny — If a TypeScript-first backend where the compiler catches permission mistakes sounds appealing, this book digs into the type system that makes that possible. It covers generics, type narrowing, and modeling data safely — exactly the muscles you flex when writing typed access rules instead of SQL policies.
See O'Reilly "Programming TypeScript" by Boris Cherny on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: typebase.io, 2026-08-26
Published there as: “Show HN: Typebase – A single-folder back end you write in TypeScript”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.