Is request safe to use?

request has 1 known vulnerabilities on the latest version (2.88.2). DepScope rates its health at 40/100 (high risk).

What is the latest version of request?

The latest version of request is 2.88.2, released 2020-02-11.

Does request have known vulnerabilities?

Yes. request has 1 known vulnerabilities. See depscope.dev/pkg/npm/request for details.

Is request deprecated?

Yes, request is deprecated: request has been deprecated, see https://github.com/request/request/issues/3142 Consider using ? instead.

What are alternatives to request?

Popular alternatives to request in npm include: ?, semver, debug, ansi-styles, minimatch.

What license does request use?

request is licensed under Apache-2.0.

request

npmv2.88.2deprecated

Simplified HTTP request client.

License Apache-2.0permissive126 versions4 maintainers20 deps12,798,694 weekly dl

request/request

/ 100

Health

find alternative

request is deprecated — find an alternative

Update to >= 3.0.0 to fix known vulnerabilities

Moderate health score (40/100) — verify manually
Package is deprecated

Health breakdown0 – 100

0/25

maintenance

20/20

popularity

23/25

security

15/15

maturity

12/15

community

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	CVE-2023-28155	Server-Side Request Forgery in Request	3.0.0

Bundle & TypeScript

📦

Bundle Size

723.7 KBminified

188.3 KB gzipped

20 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/request (DefinitelyTyped)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/request