lgtm,codescanning
* SQL injection sinks from the `knex` library are now recognized.