Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
querystringify
Advanced tools
The querystringify npm package is a utility for parsing and formatting URL query strings. It is designed to be simple and lightweight, providing basic functionalities to handle query strings in web applications.
Parse query string
This feature allows you to parse a query string into an object. It takes a query string as input and returns an object with key-value pairs corresponding to the parameters in the query string.
const querystringify = require('querystringify');
const parsed = querystringify.parse('?foo=bar&hello=world');
console.log(parsed); // { foo: 'bar', hello: 'world' }
Stringify object
This feature converts an object into a query string. It takes an object as input and returns a query string with each object property converted into a key-value pair.
const querystringify = require('querystringify');
const stringified = querystringify.stringify({ foo: 'bar', hello: 'world' });
console.log(stringified); // 'foo=bar&hello=world'
qs is a more feature-rich package compared to querystringify. It supports nested objects, arrays, and can handle complex parsing and stringifying scenarios which querystringify does not support.
query-string provides similar functionalities to querystringify but with additional features like handling arrays and objects, and it supports modern JavaScript features like ES6 modules. It is also more actively maintained.
A somewhat JSON compatible interface for query string parsing. This query string parser is dumb, don't expect to much from it as it only wants to parse simple query strings. If you want to parse complex, multi level and deeply nested query strings then you should ask your self. WTF am I doing?
This module is released in npm as querystringify
. It's also compatible with
browserify
so it can be used on the server as well as on the client. To
install it simply run the following command from your CLI:
npm install --save querystringify
In the following examples we assume that you've already required the library as:
'use strict';
var qs = require('querystringify');
The parse method transforms a given query string in to an object. Parameters
without values are set to empty strings. It does not care if your query string
is prefixed with a ?
, a #
, or not prefixed. It just extracts the parts
between the =
and &
:
qs.parse('?foo=bar'); // { foo: 'bar' }
qs.parse('#foo=bar'); // { foo: 'bar' }
qs.parse('foo=bar'); // { foo: 'bar' }
qs.parse('foo=bar&bar=foo'); // { foo: 'bar', bar: 'foo' }
qs.parse('foo&bar=foo'); // { foo: '', bar: 'foo' }
This transforms a given object in to a query string. By default we return the
query string without a ?
prefix. If you want to prefix it by default simply
supply true
as second argument. If it should be prefixed by something else
simply supply a string with the prefix value as second argument:
qs.stringify({ foo: bar }); // foo=bar
qs.stringify({ foo: bar }, true); // ?foo=bar
qs.stringify({ foo: bar }, '#'); // #foo=bar
qs.stringify({ foo: '' }, '&'); // &foo=
MIT
FAQs
Querystringify - Small, simple but powerful query string parser.
The npm package querystringify receives a total of 18,470,628 weekly downloads. As such, querystringify popularity was classified as popular.
We found that querystringify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.