Querydsl VS Hibernate

There is a bit of tooling needed but is already around. For Java for example I had very good experience with a combination of flyway [1] for migrations, testcontainers [2] for making integration tests as easy as unit tests and querydsl [3] for a query and mapping layer.

[1] https://github.com/flyway/flyway

[2] https://java.testcontainers.org/modules/databases/postgres/

[3] https://github.com/querydsl/querydsl

http://querydsl.com/ also seems similar

As for JPA: I cannot miss the QueryDSL library for building typesafe queries. Another interesting alternative is Jinq, that provides a java stream api to query entities.

> all I really want is a nice API for building queries (that actually supports all underlying database features) and automatic mapping of the results to whatever objects/structs and primitives the language supports.

For Java based solutions, check out https://www.jooq.org/ or http://querydsl.com/

QueryDsl -- http://querydsl.com

And Hibernate ORM is LGPL: see the license on their Github project.

13. Hibernate

Hibernate is the umbrella for a collection of libraries, most notably Hibernate ORM which provides Object/Relational Mapping for java domain objects. In addition to its own "native" API, Hibernate ORM is also an implementation of the Java Persistence API (jpa) specification.

I'm using Spring Data JPA as a persistence framework. Therefore, those classes are Hibernate entities.

I'm a top Hibernate contributor

Hibernate -- https://hibernate.org (huge learning curve)

This video is a crash course into the Hibernate & JPA universe.

To prevent SQL Injection attacks to sanitize input data. You can either validate every single input or validate using parameter binding. Parameter binding is mostly used by developers as it offers efficiency and security. If you are using a popular ORM such as sequelize, hibernate, etc then they already provide the functions to validate and sanitize your data. If you are using database modules other than ORM such as mysql for Node or Mongoose, you can use the escaping methods provided by the module. Let's learn by example. The codebase shown below is using mysql module for Node.