qs is a JavaScript querystring parser and serializer for turning query strings into objects and back into strings. It supports nested keys using square bracket notation and includes options for things like decoding, limits on nesting depth and parameter counts, and safer handling of prototype-related keys.
Project status
- Actively maintained: Recent tagged updates are present in 2026 (6.15.0, 6.15.1, 6.15.2), with the latest upstream push on 2026-05-21, indicating ongoing development rather than maintenance mode.
- Update cadence: Updates appear roughly every 1 to 2 months (2026-02-15 to 2026-04-08, then to 2026-05-16), suggesting a steady but not rapid release rhythm.
AI summary generated Today
Recent updates
v6.15.2
3 weeks agov6.15.2 primarily adjusts query parsing and stringification edge cases. The most notable code changes are in how bracketed keys are split during parsing (more robust handling of nested and unterminated bracket groups) and how stringify handles null/undefined values and delimiter behavior in specific modes.
Breakingv6.15.1
2 months agoRelease v6.15.1 includes a targeted fix in the querystring parser related to parameter limiting. Specifically, it corrects behavior when `parameterLimit` is set to `Infinity` while `throwOnLimitExceeded` is `true`, and it also updates lint/development dependencies.
v6.15.0
3 months agoRelease v6.15.0 was published on 2026-02-15, but the publisher provided no release notes (no details on changes). As a result, this release cannot be assessed from the provided text for API changes, bug fixes, security updates, or migration steps.
v6.12.5
3 months agoNo release notes were provided for v6.12.5. However, upgrading from v6.11.4 to v6.12.5 includes substantial changes to qs' query parsing and stringifying behavior (new options, new defaults, and internal robustness/performance refactors), plus CI workflow and dependency updates.
Featuresv6.11.4
3 months agov6.11.4 does not include publisher release notes in the provided data, but the code diff shows several robustness-focused changes plus notable behavior/option handling around `stringify` with `arrayFormat: 'comma'`. The diff also includes CI workflow permission hardening and updates to documentation and tests (including new coverage for empty keys).
BreakingSecurityFeaturesv6.10.7
3 months agoNo publisher release notes were provided for v6.10.7. The code diff between v6.9.9 and v6.10.7 shows several behavioral changes in query parsing and stringifying (notably sparse array parsing and arrayFormat comma output formatting), plus a new cyclic-reference detection mechanism and a new runtime dependency.
v6.9.9
3 months agoNo publisher release notes were provided for v6.9.9, but the repo changelog indicates this version focused on robustness regressions, plus meta/workflow updates. The actual code changes between v6.8.5 and v6.9.9 include behavioral modifications to both parsing and stringifying, especially around custom encoder/decoder callback signatures, handling of '__proto__' keys, and comma array encoding when encodeValuesOnly is enabled.
v6.8.5
3 months agov6.8.5 has no publisher-provided release notes. The repository changelog for 6.8.5 only mentions a robustness regression fix, generating an npmignore for publishing, and updating GitHub Actions workflows, but the code diff shows more substantial behavioral refactors in query parsing and stringifying.
v6.6.3
3 months agoRelease v6.6.3 was published on 2026-02-13, but no release notes or change log details were provided by the publisher. As a result, there is insufficient information to identify new features, breaking changes, bug fixes, security updates, or dependency changes from the release notes alone.
v6.7.5
3 months agoNo publisher release notes were provided for v6.7.5. The code diff from v6.6.3 to v6.7.5 shows substantial internal refactoring plus query parsing and stringifying behavior additions, including new comma-delimited array handling and changes to formatter and option normalization.
Features