Код-ревью: обработчик, который написал ассистент

const express = require('express');
const { Pool } = require('pg');

const pool = new Pool({
  connectionString: 'postgres://admin:Qwerty123@db.prod.internal:5432/shop',
});

const app = express();

app.get('/orders', async (req, res) => {
  const email = req.query.email;
  const sql = `SELECT * FROM orders WHERE email = '${email}'`;
  const result = await pool.query(sql);
  console.log('orders for', email, result.rows);
  res.json(result.rows);
});

app.listen(3000);