title: Does Knex.js prevent sql injection?
body: <p>I'm using a MySql database and was trying to find a MySQL alternative to tedious.js (a SQL server parameterised query builder).I'm using Node.js for my backend.</p>
  
  <p>I read that the .raw() command from knex.js is susceptible to sql injection, if not used with bindings.
  But are the other commands and knex.js as a whole safe to use to prevent sql injection? Or am I barking up the wrong tree?</p>