What is naked SQL? What middleware or plug-in is good for express to operate MySQL?

Last time I asked a question mysql The problem of , I am using express Background writing , I practiced writing it myself :

sql+=` where name like  "%${data.name}%" `

The following questions are answered , And remind friends not to write naked sql, I don't understand some , Naked writing sql It means whether to write directly in the program sql? I am using express To operate mysql Of , If you don't write naked, is there a good middleware recommendation ？

---

Other answers 1：

• typeorm
• In itself mysql The library also supports slot mode

You kind of ,sql What about Injection ？