Is request safe to use?

request has 1 known vulnerabilities on the latest version (2.88.2). DepScope rates its health at 40/100 (high risk).

What is the latest version of request?

The latest version of request is 2.88.2, released 2020-02-11.

Does request have known vulnerabilities?

Yes. request has 1 known vulnerabilities. See depscope.dev/pkg/npm/request for details.

Is request deprecated?

Yes, request is deprecated: request has been deprecated, see https://github.com/request/request/issues/3142 Consider using ? instead.

What are alternatives to request?

Popular alternatives to request in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does request use?

request is licensed under Apache-2.0.

request

npmv2.88.2deprecated

Simplified HTTP request client.

License Apache-2.0permissive126 versions4 maintainers20 deps15,995,791 weekly dl

request/request

/ 100

Health

legacy but working

Still installable, but maintainers declared maintenance-mode. Deprecated by maintainer (Feb 2020) — kept here for legacy projects. For new projects prefer: axios, got, node-fetch, undici.

Update to >= 3.0.0 to fix known vulnerabilities

Moderate health score (40/100) — verify manually
Package is deprecated

Health breakdown0 – 100

0/25

maintenance

20/20

popularity

23/25

security

15/15

maturity

12/15

community

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	CVE-2023-28155	Server-Side Request Forgery in Request	3.0.0

Bundle & TypeScript

📦

Bundle Size

723.7 KBminified

188.3 KB gzipped

20 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/request (DefinitelyTyped)

Quality signals

Download trend

stable(0%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/request