SQL Escaper

JSON →
library 1.3.3 ·javascript
verified Jun 5, 2026

SQL Escaper is a drop-in replacement for sqlstring that uses an AST-based approach for faster SQL escaping and formatting, with TypeScript types and ESM/CJS support. Current version is 1.3.3, released actively with weekly/monthly updates on npm. It provides ~40% faster performance, support for BigInt and Uint8Array, and fixes a previously reported SQL injection vulnerability in older mysqljs/mysql versions. Key differentiators: security-aware, modern target (Node 12+, Bun, Deno), and proper keyword/value distinction.