sqlite-ops

The code is ordinary asynchronous SQLite utility code and contains no evidence of malware or supply-chain backdoor behavior. Most queries are parameterized correctly. The main security risk is SQL injection through unvalidated column names in update_item; callers must restrict updates to an allowlisted set of column names or safely validate identifiers. Connection-pool transaction cleanup and detailed exception disclosure are additional security and reliability concerns.