Repo brief: go-gorm/gorm

Generated by RepoPilot · document generated 2026-09-16 · concise human review Evidence snapshot · analyzed 2026-09-16T09:03:33.757Z · commit 1d6ce9952806

Verdict

Healthy — Healthy across all four use cases

• Last commit 2mo ago
• 58+ active contributors
• Distributed ownership (top contributor 26% of recent commits)
• MIT licensed
• 2 more receipts on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard

What it is

GORM is a production-grade Object-Relational Mapping (ORM) library for Go that abstracts SQL database operations into idiomatic Go code. It provides a full-featured ORM with associations (Has One, Has Many, Belongs To, Many To Many), hooks, transactions, eager loading via Preload/Joins, and SQL builder capabilities—enabling developers to work with relational databases without writing raw SQL for most operations. Monolithic flat package structure: core logic lives in root-level files (association.go, callbacks.go, chainable_api.go) with two key subdirectories—callbacks/ (lifecycle hooks: create, update, delete, preload, raw, transaction) and clause/ (SQL clause builders: insert, select,…

Start here

Open these first:

• gorm.go — Core DB struct and session management; entry point for all GORM operations and middleware chain setup.
• callbacks/callbacks.go — Callback registry and execution engine that powers hooks (Before/After Create/Update/Delete/Find) used throughout GORM.
• statement.go — Statement builder that represents a single query or operation; passed through all callbacks and finishers.
• clause/clause.go — SQL clause abstraction for WHERE, SELECT, INSERT, UPDATE, DELETE, JOIN; core to query composition.
• schema/schema.go — Struct-to-schema mapping and reflection; caches model metadata used for association handling and migrations.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

Clone and initialize:

git clone https://github.com/go-gorm/gorm.git
cd gorm
go mod download
go test ./...

Go's built-in toolchain handles build and test; no additional build tool configuration visible in the file list.

Daily commands:

GORM is a library, not an application. To use it:

go get gorm.io/gorm
go get gorm.io/driver/sqlite  # or your database driver

Then import and use in your own Go code. For development/testing on the GORM codebase itself:

go test ./...
go test -bench ./clause  # clause benchmarks are present

Key cautions & unknowns

• Scorecard: marked unmaintained (2/10)
• Driver selection required: GORM itself is a shell; you must separately go get a driver (gorm.io/driver/sqlite, .../postgres, .../mysql, etc.) for any database operations. Callbacks are modular and can be disabled or…
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.