qs
npmv6.16.0A querystring parser that supports nesting and arrays, with a depth limit
Safe to adopt
Yes — qs scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 11 days ago. 37 releases in the last 2 years.
- ?Adoption: grade ?, Not reported by this registry.
No download data reported for this package yet.
- AMaintenance: grade A, Excellent.
Last published 11 days ago. 37 releases in the last 2 years.
- BWeight: grade B, Good.
Pulls in 17 transitive packages, about 712 KB installed (at least — some of the tree is still being crawled).
- ASupply chain: grade A, Excellent.
No install scripts, 2 maintainers, and a contained dependency surface.
- ALicense: grade A, Excellent.
BSD-3-Clause — permissive, with no copyleft found in the dependency tree.
Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.
Install cost
What you actually take on by adding qs to a project.
Runtime packages this one declares itself.
Distinct packages in the full runtime tree, deduplicated the way a package manager would.
Unpacked size of this package plus its entire runtime tree.
Longest resolved dependency chain below this package.
Part of this dependency tree has not been crawled yet, so these figures are a lower bound rather than a final total.
Licenses in the dependency tree
Every license you inherit by installing qs, not just its own. Check this before a legal review, not after.
Compatibility
- Node.js
- node >=0.6
- Module format
- CommonJS only
- TypeScript
- No bundled types
- Install scripts
- None
Quick start
A usage example from the qs README.
var qs = require('qs');
var assert = require('assert');
var obj = qs.parse('a=c');
assert.deepEqual(obj, { a: 'c' });
var str = qs.stringify(obj);
assert.equal(str, 'a=c');qs vs the alternatives
Packages solving a similar problem in the npm ecosystem, compared on the signals that drive an adoption decision.
| Package | Weekly downloads | Dependents | License | Last release |
|---|---|---|---|---|
| qsthis page | 0 | 4 | BSD-3-Clause | 11 days ago |
| query-string | 22.1M | 3 | MIT | 1 day ago |
| fast-querystring | 0 | 1 | MIT | 1 day ago |
| tr46 | 192.6M | 1 | MIT | 1 day ago |
| @jridgewell/resolve-uri | 166.3M | 1 | MIT | 1 day ago |
| punycode | 148.9M | 2 | MIT | 1 day ago |
Dependencies
Declared by qs v6.16.0. Runtime dependencies are installed with the package; dev dependencies are not.
Runtime (2)
Dev (32)
Used by
Popular packages that depend on qs.
Node.js body parsing middleware
Fast, unopinionated, minimalist web framework
Simplified HTTP request client.
A fast alternative to legacy querystring module
Relationship graph
Dependencies (left) and dependents (right) of qs.
Frequently installed together
Create and parse HTTP Content-Type header
The ultimate javascript content-type utility.
Create HTTP error objects
An AST-based pattern checker for JavaScript.
Infer the content-type of a request.
Execute a callback when a request closes, finishes, or errors
Lightweight debugging utility for Node.js and the browser
RFC9562 UUIDs
Encode a URL to a percent-encoded form, excluding already-encoded sequences
Node.js final http responder
Get and validate the raw body of a readable stream.
Better streaming static file server with Range and conditional-GET support
Release history
36 releases in the last two years, typically about 0 days apart.
| Version | Published | Size | License |
|---|---|---|---|
| 6.16.0latest | 11 days ago | 366 KB | BSD-3-Clause |
| 6.15.3 | 2 months ago | 338 KB | BSD-3-Clause |
| 6.15.2 | 3 months ago | 315 KB | BSD-3-Clause |
| 6.15.1 | 5 months ago | 306 KB | BSD-3-Clause |
| 6.15.0 | 6 months ago | 300 KB | BSD-3-Clause |
| 6.13.3 | 6 months ago | 253 KB | BSD-3-Clause |
| 6.12.5 | 6 months ago | 246 KB | BSD-3-Clause |
| 6.11.4 | 6 months ago | 251 KB | BSD-3-Clause |
| 6.10.7 | 6 months ago | 239 KB | BSD-3-Clause |
| 6.9.9 | 6 months ago | 168 KB | BSD-3-Clause |
| 6.8.5 | 6 months ago | 158 KB | BSD-3-Clause |
| 6.7.5 | 6 months ago | 157 KB | BSD-3-Clause |
| 6.6.3 | 6 months ago | 145 KB | BSD-3-Clause |
| 6.5.5 | 6 months ago | 123 KB | BSD-3-Clause |
| 6.4.3 | 6 months ago | 113 KB | BSD-3-Clause |
Overview
qs is an npm package that a querystring parser that supports nesting and arrays, with a depth limit. It has 4 known dependents in the graph. The latest version is 6.16.0, released under the BSD-3-Clause license.
Who should use it
Teams working in the npm ecosystem who need a querystring parser that supports nesting and arrays, with a depth limit and value a focused solution.
When not to use it
Consider an alternative if you need to minimize your dependency tree, have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.
Pros
- Clear open-source license (BSD-3-Clause).
Cons
- Large dependency tree (34 direct dependencies) increases install size and audit surface.
- No bundled TypeScript types (may require a separate @types package).
Auto-generated from collected registry metadata. No external claims are inferred.
Funding
Frequently asked questions
Should I use qs?
Yes — qs scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 11 days ago. 37 releases in the last 2 years.
How do I install qs?
Run `npm install qs` to add qs to your npm project.
How many dependencies does qs have?
qs declares 34 direct dependencies and pulls in 17 packages in total once its runtime tree is resolved totalling about 712 KB on disk.
What license is qs released under?
qs is distributed under the BSD-3-Clause license.
How popular is qs?
npm does not publish download counts. Within PackageGraph's crawl, 4 known packages depend on qs.
Is qs still maintained?
The most recent release of qs (v6.16.0) was published 11 days ago.
Does qs run install scripts?
No. qs does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.