binwrap
binwrap copied to clipboard
Remove dependency on request
Assuming this can be done safely (that there aren't notable features we lose by using nodejs APIs directly), this should be done to remove transitive dependencies.
Does the @rtfeldman's pull request #19 not do this?
Ah, yes it does, thanks!
Adding back "help wanted", since #19 needs to be rebased and have the failing tests fixed.
This dependecy has a critical vulnerability, which is problem for security audits.
request depends on form-data 2.3.3
https://github.com/request/request/blob/master/package.json#L36
Which depends on json-schema 0.2.3
json-schema 0.2.3 has a critical vulnerability: https://github.com/advisories/GHSA-896r-f27r-55mw
It would be great if this dependecy could be changed.