Request has been deprecated, should be switched to alternative module

[mattiasrunge]

Thank you for a great module!
I get this warning from yarn when installing dependencies:
warning dropbox-v2-api > [email protected]: request has been deprecated, see request/request#3142

Since request is deprecated should it be switched to something else like https://www.npmjs.com/package/isomorphic-fetch

[adasq]

You're correct. Will try to use node-fetch.
Thanks!

[boly38]

And request use json-schema in a pretty old version wich just declare a new moderate vulnerability:

└─┬ [email protected]
  └─┬ [email protected]
    └─┬ [email protected]
      └─┬ [email protected]
        └── [email protected]

---

edit: moderate issue fixed with npm update

  └─┬ [email protected]
    └─┬ [email protected]
      └─┬ [email protected]
        └─┬ [email protected]
          └── [email protected]

[boly38]

please note that request rely on vulnerable qs version

  └─┬ [email protected]
    └── [email protected]
    
 qs  6.5.0 - 6.5.2
Severity: high
qs vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-hrpp-h998-j3pp

[boly38]

Fixed with [email protected] : thanks 👍

[adasq]

Hey @boly38 , sorry for the late response.
Correct. this one was addressed, though the request package is deprecated, which is a bit painful. Struggling with finding a time to migrate it :(