Hacker News new | ask | show | jobs
by ketralnis 3835 days ago
I'm also a fan of Schematics (https://schematics.readthedocs.org/en/latest/) which is more or less identical in intent
1 comments

It looks good but using it in a naive manner to interface with a database, as shown in the example, without binding variables, leaving you totally open to injections is quite bad. What would be good is a lightweight binding to sqlalchemy, leaving the dangerous part to the expertsm. That said, there is a real place for this library and quite a few new ones have popped up in the last year.
It's definitely some bad example code, but it's not really related to the use of the library