Avoid using deprecated or outdated libraries JS-S1005
Security
Major
8 months ago
—
8 months old
Avoid using 'request' as it is deprecated. Use 'axios' instead
3 * This calls the express server defined in server.js
4**/
5
6const request = require('request') // <- deprecated library 7const baseURL = `http://localhost:3000/`
8
9request(baseURL, (error, response, body) => {
Description
It is not recommended to use third-party libraries that are deprecated or have not been actively maintained for a long time because these deprecated or non maintained libraries are not up to date with their dependencies (these dependencies are indirect dependencies to your project) which results in application exposed to the known security vulnerabilities. Along with this, these libraries often contain outdated or old language features or framework features that might not be compatible with your language or framework versions.
This issue does support recommending a better alternative for the reported library. Currently, this issue reports for the following commonly used libraries that developers often miss
- request
- cross-env
- tslint
- jscs
- babel-eslint
- babylon
- memory-fs
- node-libs-browser
- owl.carousel
- glamorous
- angular-ui-utils
- uglifyjs-webpack-plugin
- bootstrap-timepicker
- cropper
- react-hot-loader
- scribe
- node-serialize
- cli
- cst
- esmangle
Bad Practice
const fetchUtil = require('request')
const env = require('cross-env')
Recommended
const fetchUtil = require('axios')
const env = require('env-cmd')