It seems the request package has a flaw that npm audit picks up. https://github.com/advisories/GHSA-p8p7-x288-28g6 As request is deprecated and no longer supported are there any plans to replace it?