Skip to content

Consider dropping request package from dependency list #5048

@splatch

Description

@splatch

Before submitting your bug report

Relevant environment info

Description

This is not an issue per say, I just have ran npm audit over vscode plugin to see what’s there and it seems that continue is using a legacy request library which is marked as vulnerable.
Package itself was not updated since several years and could potentially be substituted with node-fetch or similar.

To reproduce

(see package.json)

Log output

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions