npmpackage.info

Gathering detailed insights and metrics for fast-xml-parser

Other packages similar to fast-xml-parser

htmlparser2

10.0.0

Fast & forgiving HTML/XML parser

cheerio

1.1.0

The fast, flexible & elegant library for parsing and manipulating HTML and XML.

saxen

10.0.0

A tiny, super fast, namespace aware sax-style XML parser written in plain JavaScript

@rgrove/parse-xml

4.2.0

A fast, safe, compliant XML parser for Node.js and browsers.

Gathering detailed insights and metrics for fast-xml-parser

fast-xml-parser - 5.2.5 | npmpackage.info

fast-xml-parser

Validate XML, Parse XML and Build XML rapidly without C/C++ based libraries and no callback.

5.2.5

2,825

MIT

JavaScript

8.91 kB

2,599,024,076 5.6

Installations

npm install fast-xml-parser

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Node Version

22.14.0

NPM Version

10.9.2 Score

99.4

Supply Chain

99.6

Quality

91.7

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

8

Total

224

Closed

65

Merged

151

Issues

Open

52

Total

465

Closed

413

Releases

upgrade to ESM module and fixing value parsing issues

v5.2.2

Updated on May 05, 2025

Summary update on all the previous releases from v4.2.4

v5.0.8

Updated on Feb 27, 2025

Security Fix

v4.2.4

Updated on Jun 07, 2023

v4.0.0

Updated on Jan 06, 2022

Fixed Parsing issues

3.17.1

Updated on May 19, 2020

Validator fix for & characters and no more settings for locale range

3.16.0

Updated on Jan 12, 2020

View All 16 releases

Languages

JavaScript

HTML

TypeScript

JavaScript (93.83%)

HTML (3.51%)

TypeScript (2.66%)

Developer

NaturalIntelligence

Download Statistics

Total Downloads

2,599,024,076

Last Day

1,444,258

Last Week

30,099,008

Last Month

129,277,317

Last Year

1,267,949,963

GitHub Statistics

MIT License

2,825 Stars

901 Commits

326 Forks

31 Watchers

8 Branches

104 Contributors

Updated on Jul 01, 2025

Bundle Size

27.60 kB

Minified

8.91 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://github.com/sponsors/NaturalIntelligence

Maintainers

View All 104 Contributors

Package Meta Information

Latest Version

5.2.5

Package Id

fast-xml-parser@5.2.5

Unpacked Size

555.10 kB

Size

147.89 kB

File Count

NPM Version

10.9.2

Node Version

22.14.0

Published on

Jun 08, 2025

Total Downloads

Cumulative downloads

Total Downloads

2,599,024,076

Last Day

4.8%

1,444,258

Compared to previous day

Last Week

-6.3%

30,099,008

Compared to previous week

Last Month

2.5%

129,277,317

Compared to previous month

Last Year

56.6%

1,267,949,963

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

strnum

Dev Dependencies

@babel/core @babel/plugin-transform-runtime @babel/preset-env @babel/register @types/node babel-loader c8 eslint he jasmine prettier publish-please typescript webpack webpack-cli

fast-xml-parser

Validate XML, Parse XML to JS Object, or Build XML from JS Object without C/C++ based libraries and no callback.

Validate XML data syntactically. Use detailed-xml-validator to verify business rules.
Parse XML to JS Objectand vice versa
Common JS, ESM, and browser compatible
Faster than any other pure JS implementation.

It can handle big files (tested up to 100mb). XML Entities, HTML entities, and DOCTYPE entites are supported. Unpaired tags (Eg <br> in HTML), stop nodes (Eg <script> in HTML) are supported. It can also preserve Order of tags in JS object

Your Support, Our Motivation

Try out our New Thoughts

We've recently launched Flowgger

Don't forget to check our new library Text2Chart that constructs flow chart out of simple text. Very helpful in creating or alayzing an algorithm, and documentation purpose.

Financial Support

Sponsor this project

fxp_sponsors

This is a donation. No goods or services are expected in return. Any requests for refunds for those purposes will be rejected.

Users

The list of users are mostly published by Github or communicated directly. Feel free to contact if you find any information wrong.

More about this library

How to use

To use as package dependency $ npm install fast-xml-parser or $ yarn add fast-xml-parser

To use as system command $ npm install fast-xml-parser -g

To use it on a webpage include it from a CDN

Example

As CLI command

1$ fxparser some.xml

In a node js project

1const { XMLParser, XMLBuilder, XMLValidator} = require("fast-xml-parser");
2
3const parser = new XMLParser();
4let jObj = parser.parse(XMLdata);
5
6const builder = new XMLBuilder();
7const xmlContent = builder.build(jObj);

In a HTML page

1<script src="path/to/fxp.min.js"></script>
2:
3<script>
4  const parser = new fxparser.XMLParser();
5  parser.parse(xmlContent);
6</script>

Bundle size

Bundle Name	Size
fxbuilder.min.js	6.5K
fxparser.min.js	20K
fxp.min.js	26K
fxvalidator.min.js	5.7K

Documents

v3	v4 and v5	v6
documents	Getting Started XML Parser XML Builder XML Validator Entities HTML Document Parsing PI Tag processing	Getting Started Features Options Output Builders Value Parsers

note:

Version 6 is released with version 4 for experimental use. Based on it's demand, it'll be developed and the features can be different in final release.
Version 5 has the same functionalities as version 4.

Performance

negative means error

XML Parser

Y-axis: requests per second
X-axis: File size

XML Builder

* Y-axis: requests per second

Usage Trend

Usage Trend of fast-xml-parser

Supporters

Contributors

This project exists thanks to all the people who contribute. [Contribute].

Backers from Open collective

Thank you to all our backers! 🙏 [Become a backer]

License

MIT License

Donate $5

High

7.5/10

Summary

fast-xml-parser vulnerable to ReDOS at currency parsing

Affected Versions

>= 4.3.5, < 4.4.1

Patched Versions

4.4.1

High

7.5/10

Summary

fast-xml-parser vulnerable to Regex Injection via Doctype Entities

Affected Versions

>= 4.1.3, < 4.2.4

Patched Versions

4.2.4

Moderate

6.5/10

Summary

fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name

Affected Versions

< 4.1.2

Patched Versions

4.1.2

Low

0/10

Summary

fast-xml-parser regex vulnerability patch could be improved from a safety perspective

Affected Versions

= 4.2.4

Patched Versions

4.2.5

10

Security-Policy

Determines if the project has published a security policy.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Fuzzing

Determines if the project uses fuzzing.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

2

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

SAST

Determines if the project uses static code analysis.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Score

5.6

/10

Last Scanned on 2025-06-30

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More