Using the literalString setting, this package reports non literal string usages in methods like Connection::executeQuery. But these types are missing for the update, insert and delete methods.

These methods all use string concatenation to create the resulting SQL. The $table parameter should be a literal string, as well as the
array keys of the $data and$criteria.