
Security News
Packagist Urges Immediate Composer Update After GitHub Actions Token Leak
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.
@smithy/querystring-parser
Advanced tools
[](https://www.npmjs.com/package/@smithy/querystring-parser) [](https://www.npmjs.com/package/@
This is an internal package. That means this is used as a dependency for other, public packages, but should not be taken directly as a dependency in your application's
package.json.
If you are updating the version of this package, for example to bring in a bug-fix, you should do so by updating your application lockfile with e.g.
npm up @scope/packageor equivalent command in another package manager, rather than taking a direct dependency.
The `query-string` package is a widely-used library for parsing and stringifying URL query strings. It offers similar functionality to @smithy/querystring-parser but also includes additional features like handling arrays and nested objects.
The `qs` package is another popular library for parsing and stringifying query strings. It provides more advanced features compared to @smithy/querystring-parser, such as support for nested objects, arrays, and custom delimiters.
The `url-search-params` package is a polyfill for the URLSearchParams API, which is natively available in modern browsers. It provides a similar interface for working with query strings, making it a good alternative to @smithy/querystring-parser for environments that do not support URLSearchParams natively.
FAQs
Unknown package
The npm package @smithy/querystring-parser receives a total of 43,152,329 weekly downloads. As such, @smithy/querystring-parser popularity was classified as popular.
We found that @smithy/querystring-parser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.

Company News
Socket was named to the Rising in Cyber 2026 list, recognizing 30 private cybersecurity startups selected by CISOs and security executives.