postgres

I prefer the postgres module. 0 dependencies. Easy to use API. Wicked fast. Also really hard to fall victim to SQL injection attacks unless you actually put some extra effort into doing something foolish. https://github.com/porsager/postgres#readme

I don't like the sql() helpers part, and that they try to guess whether I want a helper for insert or update, based on some regexes and that helpers for different things all are sql(something) while doing very different things. https://github.com/porsager/postgres/blob/master/lib/index.j... I also tend to compose queries out of smaller static parts dynamically, and tagged syntax does seem to make that hard. Patterns like: let params = {}; let conds = ['TRUE'] if (some_user_input) { conds.push('a = $test'); params.test = some_user_input; } db.query(` SELECT cols, ... FROM xxx WHERE abc AND ${conds.join(' AND ')} `, params); Not having a way to compose tagged literals and not having named parameters, only $1 just made it hard to port any of my existing projects based on pg-promise to your

I built a safe PostgreSQL driver for node from scratch with zero dependencies in about 1200 lines. I did this mostly because of the plumbing required to make the goto node driver tolerable to work with. In the process I made it 4-5 times faster as well. https://github.com/porsager/postgres

Anyone know how this compares to porsager's "postgres" lib? https://github.com/porsager/postgres