This package has been deprecated with the following message: request has been deprecated, see https://github.com/request/request/issues/3142

Generated on Mar 12, 2024 via pnpm

Repo

Npm

Home

request 2.62.0

Simplified HTTP request client.

Package summary

issues

licenses

Package created

22 Jan 2011

Version published

15 Sep 2015

Maintainers

Total deps

Direct deps

License

Apache-2.0

Issues

4 critical severity issues

critical

asn1@0.1.11

Package has no specified license

Recommendation: Check the package code and files for license information

via: http-signature@0.11.0

assert-plus@0.1.5

Package has no specified license

Recommendation: Check the package code and files for license information

via: http-signature@0.11.0

aws-sign2@0.5.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: aws-sign2@0.5.0

ctype@0.5.3

Package has no specified license

Recommendation: Check the package code and files for license information

via: http-signature@0.11.0

Collapse

Expand

14 high severity issues

high

qs@5.1.0

Prototype Pollution Protection Bypass in qs

Recommendation: Upgrade to version 6.0.4 or later

via: qs@5.1.0

hoek@2.16.3

Prototype Pollution in hoek

Recommendation: Upgrade to version 4.2.1 or later

via: hawk@3.1.3

hawk@3.1.3

Uncontrolled Resource Consumption in Hawk

Recommendation: Upgrade to version 9.0.1 or later

via: hawk@3.1.3

hoek@2.16.3

hoek subject to prototype pollution via the clone function.

Recommendation: None

via: hawk@3.1.3

qs@5.1.0

qs vulnerable to Prototype Pollution

Recommendation: Upgrade to version 6.2.4 or later

via: qs@5.1.0

sntp@1.0.9

Package uses an invalid SPDX license ("BSD")

Recommendation: Validate that the package complies with your license policy

via: hawk@3.1.3

boom@2.10.1

Deprecated package

via: hawk@3.1.3

cryptiles@2.0.5

Deprecated package

via: hawk@3.1.3

har-validator@1.8.0

Deprecated package

via: har-validator@1.8.0

hawk@3.1.3

Deprecated package

via: hawk@3.1.3

hoek@2.16.3

Deprecated package

via: hawk@3.1.3

node-uuid@1.4.8

Deprecated package

via: node-uuid@1.4.8

request@2.62.0

Deprecated package

via: request@2.62.0

sntp@1.0.9

Deprecated package

via: hawk@3.1.3

Collapse

Expand

6 moderate severity issues

moderate

request@2.62.0

Server-Side Request Forgery in Request

Recommendation: None

via: request@2.62.0

request@2.62.0

Remote Memory Exposure in request

Recommendation: Upgrade to version 2.68.0 or later

via: request@2.62.0

tunnel-agent@0.4.3

Memory Exposure in tunnel-agent

Recommendation: Upgrade to version 0.6.0 or later

via: tunnel-agent@0.4.3

bl@1.0.3

Remote Memory Exposure in bl

Recommendation: Upgrade to version 1.2.3 or later

via: bl@1.0.3

request@2.62.0

Server-Side Request Forgery in Request

Recommendation: None

via: request@2.62.0

request@2.62.0

Remote Memory Exposure in request

Recommendation: Upgrade to version 2.68.0 or later

via: request@2.62.0

Collapse

Expand

1 low severity issue

low

sntp@1.0.9

Package uses a license that is not OSI approved ("BSD")

Recommendation: Read and validate the license terms

via: hawk@3.1.3

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

41 Packages, Including:

ansi-regex@2.1.1

ansi-styles@2.2.1

async@2.6.4

bl@1.0.3

bluebird@2.11.0

chalk@1.1.3

combined-stream@1.0.8

commander@2.20.3

core-util-is@1.0.3

delayed-stream@1.0.0

escape-string-regexp@1.0.5

extend@3.0.2

form-data@1.0.1

generate-function@2.3.1

generate-object-property@1.2.0

has-ansi@2.0.0

http-signature@0.11.0

is-my-ip-valid@1.0.1

is-my-json-valid@2.20.6

is-property@1.0.2

isarray@1.0.0

isstream@0.1.2

jsonpointer@5.0.1

lodash@4.17.21

mime-db@1.52.0

mime-types@2.1.35

node-uuid@1.4.8

process-nextick-args@1.0.7

psl@1.9.0

punycode@2.3.1

querystringify@2.2.0

readable-stream@2.0.6

requires-port@1.0.0

string_decoder@0.10.31

stringstream@0.0.6

strip-ansi@3.0.1

supports-color@2.0.0

universalify@0.2.0

url-parse@1.5.10

util-deprecate@1.0.2

xtend@4.0.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

6 Packages, Including:

boom@2.10.1

cryptiles@2.0.5

hawk@3.1.3

hoek@2.16.3

qs@5.1.0

tough-cookie@4.1.3

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

5 Packages, Including:

caseless@0.11.0

forever-agent@0.6.1

oauth-sign@0.8.2

request@2.62.0

tunnel-agent@0.4.3

N/A

4 Packages, Including:

asn1@0.1.11

assert-plus@0.1.5

aws-sign2@0.5.0

ctype@0.5.3

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

har-validator@1.8.0

inherits@2.0.4

json-stringify-safe@5.0.1

BSD

Invalid

Not OSI Approved

1 Packages, Including:

sntp@1.0.9

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of request 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
aws-sign2	0.5.0	4.93 kB	UNKNOWN	prod	1
bl	1.0.3	8.56 kB	MIT	prod	1
caseless	0.11.0	5.05 kB	Apache-2.0	prod
combined-stream	1.0.8	3.97 kB	MIT	prod
extend	3.0.2	7.09 kB	MIT	prod
forever-agent	0.6.1	4.92 kB	Apache-2.0	prod
form-data	1.0.1	7.3 kB	MIT	prod
har-validator	1.8.0	5.4 kB	ISC	prod	1
hawk	3.1.3	118.94 kB	BSD-3-Clause	prod	9 1
http-signature	0.11.0	12.36 kB	MIT	prod	3
isstream	0.1.2	3.67 kB	MIT	prod
json-stringify-safe	5.0.1	3.92 kB	ISC	prod
mime-types	2.1.35	5.46 kB	MIT	prod
node-uuid	1.4.8	13.8 kB	MIT	prod	1
oauth-sign	0.8.2	5.01 kB	Apache-2.0	prod
qs	5.1.0	14.26 kB	BSD-3-Clause	prod	2
stringstream	0.0.6	2.4 kB	MIT	prod
tough-cookie	4.1.3	30.52 kB	BSD-3-Clause	prod
tunnel-agent	0.4.3	5.64 kB	Apache-2.0	prod	1