request
2.88.2Apache-2.0Deprecated
The maintainers have deprecated this package
request has been deprecated, see https://github.com/request/request/issues/3142
A deprecation is not a bug and nothing breaks the day it is published. It does mean no fix is coming, which is worth knowing before the next security advisory rather than after.
What to use instead- 2.88.2 is the latest.
- 2 security advisories, 1 with no fix yet.
- 2.x: 109 releases since 21 July 2011.
Security advisories
Grouped by the version that fixes them, so one upgrade reads as one step.
No fixed version published yet · 1 advisory
- MODERATEServer-Side Request Forgery in RequestGHSA-p8p7-x288-28g6
Fixed in 2.68.0 · 1 advisory
- MODERATERemote Memory Exposure in requestGHSA-7xfp-9c55-5vqj
Releases, signals and related packageskept for reference, nothing new is coming
Major versions
- 2.xsince 21 July 2011 · latest 2.88.2 · 109 releases
- 1.xsince 22 January 2011 · latest 1.9.9 · 12 releases
- 0.xsince 22 January 2011 · latest 0.10.0 · 5 releases
Registry facts last checked 15 October 2026. Releases and advisories last read 15 October 2026.
Know when your own dependencies move
Inlinr tracks your coding time automatically. Switch dependency tracking on for a project and it reads that repository's manifest to show what is behind and what has been deprecated — off by default, one project at a time.