Hacker News Reader

For most uses, SQL databases are easy to use and general enough to allow practically unlimited growth, "stringy queries" usually need less "wrangling" than accessing bare files correctly, and designing and implementing file formats is a luxury (usually done because optimizing for file size and compression is traditional).

View on HN

Yea those go in the pros.

On the cons, you have sql injections, which can kill your company's reputation.

It only became less common by shifting the issue to the supply chain, now you need orms and yet another wrangling library. So I'm not convinced the security issue is "fixed", let alone the code complexity introduced by these things just to effectively do one of the most fundamental operations in computing, writing() to disk

You don't need an orm or some wrangling library to avoid sql injections. You just have to use parameterized queries. That's a bit cumbersome when using the bare C SQLite API, but in Python it's very easy.

Reply on news.ycombinator.com