Build Safer Supabase Apps with supabase-test

D

Dan Lynch

Nov 20, 2025

Build Safer Supabase Apps with supabase-test

Supabase has unlocked an entirely new way to build backends — one where Postgres feels native to TypeScript, where RLS is a first-class citizen, and where developers can ship full-stack features with remarkable speed. As the Supabase ecosystem grows, so does the need for tools that keep pace with this modern workflow. Our goal is to complement the Supabase experience by providing a testing foundation that matches the power and velocity of the platform itself.

At the heart of our software is a simple philosophy: we believe great engineering comes from fast feedback loops and developer joy. That’s why we built supabase-test — a developer-first testing library designed to make Postgres and Supabase testing feel as smooth as modern TypeScript development. When you can hit save, see a test complete in under a second, and instantly know whether your RLS logic is secure, your entire development process transforms. Instead of clicking around dashboards like a QA tester, you stay in flow as an engineer — iterating quickly, experimenting safely, and shipping features with confidence. This fast feedback loop is the secret behind modern JavaScript development, and we believe it should be standard in Postgres development as well.

Supabase has made Postgres accessible to thousands of developers who are building real applications with real security needs. With more teams adopting RLS and multi-tenant patterns, we saw an opportunity to reinforce the platform by making it dramatically easier to test these workflows locally and in CI. supabase-test provides ephemeral Postgres environments per test, TypeScript-native APIs, and instant iteration cycles — giving developers the ability to validate policies, migrations, and database logic with the same ease they test frontend code.

One area where this makes a significant impact is Row Level Security. Supabase’s RLS model is powerful, flexible, and central to secure application design. supabase-test enhances that experience by letting developers simulate multiple users, swap roles within a single test, and verify RLS behavior through fast, automated checks. This creates a development environment where secure patterns naturally emerge and best practices become easier to adopt.

We see supabase-test as a supportive addition to the Supabase ecosystem — one that amplifies what developers already love about the platform. By bringing fast feedback loops, modular database workflows, and TypeScript-driven testing to Supabase projects, we help teams ship with confidence while maintaining the high velocity Supabase enables. Together, we’re moving the ecosystem toward a future where backend engineering is not only powerful and secure, but genuinely enjoyable.

We've been contributing to the Supabase and Postgres ecosystem for years — from protobuf-to-TypeScript tooling to low-level AST libraries like pgsql-parser and pg-proto-parser. As a continuation of that work, we're excited to introduce a set of new resources designed to elevate Supabase testing:

Get Started

Start building more reliable Supabase applications with these resources:

  • 📦 supabase-test — TypeScript-native library for fast, isolated Postgres testing optimized for Supabase projects

    • Install from npm and start testing your RLS policies, Auth flows, and database logic
    • View source on GitHub
  • 🧪 supabase-test-suite — Complete reference implementation and example harness showcasing testing best practices

    • Clone, explore, and adapt to your own projects
  • 📖 Tutorials — Guided, hands-on lessons covering Supabase test patterns, RLS validation, seeding workflows, and end-to-end Postgres testing.

We're excited to see what you build!