`request` has a CVE and is deprecated, any plans to publish a version that addresses this vulnerability

not-an-aardvark / snoowrap

A JavaScript wrapper for the reddit API

MIT License

1.01k stars 125 forks source link

Open knihit opened 1 year ago

knihit commented 1 year ago

There is a CVE on the request module used by this library https://github.com/advisories/GHSA-p8p7-x288-28g6.

Also the request module is now deprecated - https://www.npmjs.com/package/request.

Is there a plan to update the current library to address the above issues?

mar-cymk commented 1 year ago

It sounds like they are considering deprecating snoowrap while waiting for the major Reddit API update. https://github.com/not-an-aardvark/snoowrap/issues/370

I would like to see the request issue addressed, but maybe there simply isn't the manpower to do so at the moment.