I don't have enough time to test _python_to_sql
function for SQL injections.
For more information and discussion, see the following URL:
Barebones pure-python PostGreSQL Client Library
Originally written by Barry Pederson: https://barryp.org/blog
Mostly DB-API 2.0 compliant (see docs/differences.txt and docs/extensions.txt)