Replace the deprecated and vulnerable dependency package request

[joonaojapalo]

Hi!

The direct dependency package request has been deprecated in Feb 2020 (https://www.npmjs.com/package/request). All versions of request including the latest one are affected by prototype pollution vulnerability (https://sca.analysiscenter.veracode.com/vulnerability-database/security/sca/vulnerability/sid-21913/summary)

Maintainers of the package have composed the list of alternative libraries for replacement: request/request#3143

[whtswrng]

Thank you for reporting this issue. We are now tracking this issue internally as LOG-12016.

[adarshmadrecha]

@whtswrng Any update/timeline on when the request dependency will be replaced with another suitable package?

[phawxby]

This issue is now of critical importance. GHSA-p8p7-x288-28g6

While there is a pull to address the issue there appears to be no activity from any of the maintainers to merge it.

[zdenek-machek-swi]

We are working on fix, to replace request package.

[adarshmadrecha]

Looking forward to the new release. Thanks in Advance.