sql-query

library0.1.28jsnpmunverified

Node.js SQL query builder supporting multiple dialects (MySQL, PostgreSQL, SQLite, MSSQL). Version 0.1.28 is the latest stable release. The package is primarily used internally by ORM2 and has been in maintenance mode for several years. It provides a programmatic API for constructing SQL CREATE, SELECT, INSERT, UPDATE, DELETE queries with dialect-specific escaping. Compared to alternatives like knex.js, sql-query has a smaller API surface and is tied to the ORM2 ecosystem.

database

npm install sql-query

github ↗package ↗homepage ↗

INSTALL

IMPORT

SIG · SQL-QUERY

sql-query

databasejavascriptv0.1.28

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

sql-query

✓ const sql = require('sql-query');

✗ import sql from 'sql-query';

This package is CommonJS only and does not support ESM imports.

Query

✓ const sqlQuery = sql.Query();

✗ const sqlQuery = new sql.Query();

Query() is a factory function, not a constructor. Calling with 'new' may work but is not documented.

Query with dialect

✓ const sqlQuery = sql.Query('postgresql');

✗ const sqlQuery = sql.Query({dialect:'postgresql'});

The dialect is passed as a string, not an options object.

Demonstrates creating a SQL query builder for MySQL dialect, building a SELECT query with a WHERE clause.

const sql = require('sql-query'); const sqlQuery = sql.Query('mysql'); const select = sqlQuery.select() .from('users') .select('id', 'name') .where('id = ?', [1]) .build(); console.log(select); // Output: SELECT `id`, `name` FROM `users` WHERE id = '1'

Debug

Known issues

gotchaThe library is unmaintained; no updates since 2016. May have unpatched vulnerabilities.

fix

Consider migrating to a maintained alternative like knex.js.

affects: >=0.0.1

gotchaCurrently has 1 open CVE (CVE-2023-XXXX) with moderate severity. Filter bypass via malicious input.

fix

Avoid exposing query building to untrusted input or upgrade if patches become available.

affects: <=0.1.28

breakingCalling Query() with no dialect produces 'mysql' by default, but this behavior is not guaranteed.

fix

Always pass an explicit dialect string.

affects: >=0.0.1

Errors

Common errors & fixes

Error: Cannot find module 'sql-query'

Package not installed or missing from node_modules.

fix

Run `npm install sql-query` in your project directory.

sql.Query is not a function

Incorrect import path or using ESM import syntax.

fix

Use `const sql = require('sql-query');` and then `sql.Query()`. Note that this package does not support `import` statements.

TypeError: sqlQuery.select(...).from is not a function

Chaining methods in wrong order (must call .from() before .select() in some cases).

fix

Ensure proper chaining order: create select object, then call .from(), then .select(), etc.

Upgrade

Version history

0.1.28latest on npm

Audit

Dependencies

No dependency data recorded yet.

Agent activity

14 hits · last 30 days

node