let sql = `delete from order_lines`
            ` where order_id = ${orderId}`;

Without a lint complaining about a missing semicolon you wouldn't notice this bug.

This has happened to me with a rather more complex query.