Consulta Filtrar sql server

let sql = [
    "SELECT * FROM table",
    "WHERE id = @id",
    "AND name = @name"
].join(" ");

let parametros = {
    id: 1,
    name: 'Rodrigo'
}

sql = sql.replace(/@\w+/gi, (match) => {
    let key = match.substr(1);
    if (key in parametros) {
        return "'" + parametros[key] + "'";
    }
    return match;
});