Deprecated 'request' package in dependences

npm WARN deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142

request also introduces a transitive dependency to json-schema@0.2.3 which contains a CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3918

are there any intentions of moving away from request and find a suitable replacement?

If I were to submit a pull request for this would it actually be considered?

Any update on this one? Using deprecated dependency doesn't sound good.

The recently found vulnerability CVE-2023-28155 in the 'request' package is detected as a dependency vulnerability by OWASP Dependency Check.

Navigation Menu