
Security News
New React Server Components Vulnerabilities: DoS and Source Code Exposure
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.
qstion
Advanced tools
A querystring parsing and stringifying library with some added security. Library was based on this js library.
import qstion as qs
x = qs.parse('a=c')
assert x == {'a': 'c'}
x_str = qs.stringify(x)
assert x_str == 'a=c'
Full documentation reference: https://www.npmjs.com/package/qs Result of parsing can be returned as root object if needed, but default implementation is to return a dictionary.
Parser:
plainObjectsignoreQueryPrefix - always False, query is always considered without prefixStrict null handlingStringifier:
encoder and decoder functionssorting of keysfiltering of keysprimitive values: int, float are represented as decimal.Decimal, bool-like values are represented as bool whatever the case they are in, however this can be processed strictly using primitive_strict option, null-like values are represented as NoneParser:
sparse arrays are represented as dictionaries with keys as indexesundefined values are represented as strings 'undefined'a without = are considered as non-value and thus are not included in the resultFAQs
Simple package for parsing querystrings into nested dictionaries and vice versa.
We found that qstion demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.

Security News
GitHub has revoked npm classic tokens for publishing; maintainers must migrate, but OpenJS warns OIDC trusted publishing still has risky gaps for critical projects.