Ревью: репозиторий на Java

public List<Order> find(String status, String sortBy) throws SQLException {
    String sql = "SELECT * FROM orders WHERE status = ? ORDER BY " + sortBy;
    PreparedStatement ps = conn.prepareStatement(sql);
    ps.setString(1, status);
    ResultSet rs = ps.executeQuery();
    List<Order> res = new ArrayList<>();
    while (rs.next()) res.add(map(rs));
    return res;
}