use cypher variables

Signed-off-by: tomnijhof <tom.nijhof@cytosmart.com>

Author: tomnijhof

app/main.py

@@ -29,10 +29,11 @@ async def read_item(package_names: list):
     response = graph.run(
         f"""
             MATCH (n:Package)-[:DEPENDS_ON*0..]->(m:Package)
-            WHERE n.name in {package_names}
+            WHERE n.name in $package_names
             WITH DISTINCT m as p
             RETURN DISTINCT p.license as licenses, collect(p.name) as packageNames, sum(p.package_size) as totalSizeBytes
-        """
+        """,
+        package_names=package_names,
     ).data()
 
     # Not all packages will be found