replace deprecated dependencies

[jerger]

Hi,

we're using mastodon-api at https://github.com/yogthos/mastodon-bot and https://github.com/DomainDrivenArchitecture/dda-masto-embed. At the moment we're trying to get rid of the warning

npm install says:
npm WARN deprecated request@2.88.0: request has been deprecated, see https://github.com/request/request/issues/3142

I think mastodon-api is affected by deprecated request also. A solution (found e.g. at https://github.com/HunterLarco/twitter-v2) might be to replace

• request -> node-fetch
• and oauth -> oauth-1.0.x

What do you think?

[EBendinelli]

Using this issue to flag that one of the dependency (gulp-eslint) has a know vulnerability as flagged in this issues.

This project seems unmaintained and it might be interesting to consider using a more actively maintained fork such as fasttime/gulp-eslint7.

FWIW I found about this thanks to Google's newly released Open Source Insights project: https://deps.dev/npm/mastodon-api

[alien-sunset]

is this project even being maintained anymore? does anyone have a better option that is being actively maintained?