pgpm is a package manager for application-layer PostgreSQL code: schemas, functions, triggers, and Row-Level Security policies written in pure SQL.
The goal is to move beyond linear, numbered migration chains toward composable, dependency-aware database modules that can be published, versioned, installed, and tested in isolation against real PostgreSQL.
This approach is already being used to package large PostgreSQL systems (including the full Supabase database layer) to enable local and CI testing of production-grade schemas and RLS behavior.
Docs + quickstart: https://pgpm.io/
Happy to answer questions or discuss tradeoffs.