I tried sea-orm, but I find its ORM API way too limited (it can't even do multiple joins). For anything beyond simple queries, you end up needing to use its query builder (sea-query) which is blind to your db schema so you need to manually hand-validate all your queries. It's basically no better than pushing string queries + manually validating the output with serde.
> I found their query building catastrophically bad the moment the query isn't build all in one place
If you're talking about its crazy return types, there's the auto_type macro that lets you generate return types for functions automatically.
> There was also pretty bad security issue
That sounds concerning, can you link it here?