{"id":42882,"library":"is-sql-injection","title":"is-sql-injection","description":"Lightweight package (v1.0.0) that uses a regex-based approach to detect potential SQL injection strings in user input. It exposes a single `isSQLInjection` function that returns a boolean indicating whether the input contains patterns commonly associated with SQL injection attacks. The package is minimal, with no dependencies, but its regex-based detection is simplistic and not suitable for production security; it should only be used for basic sanitization or educational purposes. Maintained on GitHub with CI and coverage, though release cadence is irregular.","status":"active","version":"1.0.0","language":"javascript","source_language":"en","source_url":"https://github.com/Kikobeats/is-sql-injection","tags":["javascript","injection","input","regex","sql","string","validate","validator"],"install":[{"cmd":"npm install is-sql-injection","lang":"bash","label":"npm"},{"cmd":"yarn add is-sql-injection","lang":"bash","label":"yarn"},{"cmd":"pnpm add is-sql-injection","lang":"bash","label":"pnpm"}],"dependencies":[],"imports":[{"note":"Default export only; ESM import syntax works for Node >= 12 with ESM enabled.","wrong":"const isSQLInjection = require('is-sql-injection')","symbol":"isSQLInjection","correct":"import isSQLInjection from 'is-sql-injection'"}],"quickstart":{"code":"import isSQLInjection from 'is-sql-injection'\n\nconst suspiciousInput = '1 OR 1=1'\nconst result = isSQLInjection(suspiciousInput)\nconsole.log(result) // true\n\nconst safeInput = 'Hello World'\nconsole.log(isSQLInjection(safeInput)) // false","lang":"javascript","description":"Shows basic usage: checking strings for potential SQL injection patterns."},"warnings":[{"fix":"Do not rely on this package for security-critical applications. Use a proper ORM with parameterized queries.","message":"Package uses a very simple regex; many real-world SQL injection techniques bypass it entirely.","severity":"gotcha","affected_versions":">=1.0.0"},{"fix":"Consider additional input validation or use a dedicated security library.","message":"The function may have false negatives for encoded or obfuscated injection attempts.","severity":"gotcha","affected_versions":">=1.0.0"}],"env_vars":null,"search_vec":"'approach':14 'associ':41 'attack':45 'base':13,57 'basic':73 'boolean':33 'cadenc':87 'ci':82 'common':40 'contain':38 'coverag':84 'depend':52 'detect':16,58 'educ':76 'expos':25 'function':29 'github':80 'indic':34 'inject':4,19,44,91 'input':23,37,92 'irregular':89 'is-sql-inject':1 'issqlinject':28 'javascript':90 'lightweight':5 'maintain':78 'minim':49 'packag':6,47 'pattern':39 'potenti':17 'product':65 'purpos':77 'regex':12,56,93 'regex-bas':11,55 'releas':86 'return':31 'sanit':74 'secur':66 'simplist':60 'singl':27 'sql':3,18,43,94 'string':20,95 'suitabl':63 'though':85 'use':9,71 'user':22 'v1.0.0':7 'valid':96,97 'whether':35","created_at":"2026-06-05T16:57:07.444718+00:00","updated_at":"2026-06-05T16:57:07.444718+00:00","problems":[{"fix":"Use import instead of require, or set type: 'module' in package.json for Node >= 12.","cause":"Package uses ESM export but code uses CommonJS require()","error":"Error [ERR_REQUIRE_ESM]: require() of ES Module not supported"},{"fix":"Use import isSQLInjection from 'is-sql-injection' (default import, not named import).","cause":"Default import was not correctly assigned; may have used named import incorrectly.","error":"TypeError: isSQLInjection is not a function"}],"ecosystem":"npm","meta_description":null,"install_score":null,"quickstart_score":null,"quickstart_tag":null,"pypi_latest":null,"cli_name":null,"cli_version":null,"type":"library","homepage":"https://documentup.com/Kikobeats/is-sql-injection","github":"https://github.com/Kikobeats/is-sql-injection","docs":null,"changelog":null,"pypi":null,"npm":"is-sql-injection","openapi_spec":null,"status_page":null,"smithery":null,"categories":["security"],"base_url":null,"auth_type":null,"provenance":{"verified_status":null,"verified_at":null,"last_verified":"2026-06-05","next_check":"2026-09-03","install_tag":null}}