use `SqlParameterCollection.AddRange`

[JoeGaggler]

Minor suggestion to use SqlParameterCollection.AddRange to add parameters to the command, instead of Add on each one:

cmd.Parameters.AddRange(
    CreateParameter("@foo", foo, SqlDbType.VarChar, 1000),
    CreateParameter("@bar", bar, SqlDbType.VarChar),
    CreateParameter("@status", format, SqlDbType.TinyInt, 1)
);

[JoeGaggler]

It's possible that the parameter collection might optimize AddRange over multiple Add calls, but unless that can be verified there is not a compelling reason to use AddRange.