ORM

A tool that lets developers interact with a database using code instead of raw SQL. Popular ORMs include Prisma, Drizzle, and Sequelize. They make database queries safer and more readable.

ORMs prevent entire categories of security vulnerabilities (SQL injection) and let developers query databases in a language they know. Prisma is the standard in the Next.js ecosystem.

Instead of writing raw SQL, a developer uses Prisma to query: db.user.findMany({ where: { plan: "pro" } }), readable, type-safe, and secure.