request 2.73.0

Simplified HTTP request client.

request@2.73.0 was published on 2016-07-09. Its manifest declares 21 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >=0.8.0.

Deprecated: request has been deprecated, see https://github.com/request/request/issues/3142

All request versions · Permanent reference to 2.73.0 · Latest release

Package specifications

Version	2.73.0
License declaration	Apache-2.0
Published	2016-07-09T07:43:25.258Z
Node.js requirement	>=0.8.0
Type declarations	Not declared
Runtime dependency count	21
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	73
Repository stars	25486
Repository forks	3136

Install request 2.73.0

npm install request@2.73.0
pnpm add request@2.73.0
yarn add request@2.73.0

Runtime dependencies

bl ~1.1.2
qs ~6.2.0
aws4 ^1.2.1
hawk ~3.1.3
extend ~3.0.0
caseless ~0.11.0
isstream ~0.1.2
aws-sign2 ~0.6.0
form-data ~1.0.0-rc4
node-uuid ~1.4.7
mime-types ~2.1.7
oauth-sign ~0.8.1
stringstream ~0.0.4
tough-cookie ~2.2.0
tunnel-agent ~0.4.1
forever-agent ~0.6.1
har-validator ~2.0.6
is-typedarray ~1.0.0
http-signature ~1.1.0
combined-stream ~1.0.5
json-stringify-safe ~5.0.1

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

aws-sign2@0.6.0 — direct
aws4@1.13.2 — direct
bl@1.1.2 — direct
caseless@0.11.0 — direct
combined-stream@1.0.8 — direct
extend@3.0.2 — direct
forever-agent@0.6.1 — direct
form-data@1.0.1 — direct
har-validator@2.0.6 — direct
hawk@3.1.3 — direct
http-signature@1.1.1 — direct
is-typedarray@1.0.0 — direct
isstream@0.1.2 — direct
json-stringify-safe@5.0.1 — direct
mime-types@2.1.35 — direct
node-uuid@1.4.8 — direct
oauth-sign@0.8.2 — direct
qs@6.2.6 — direct
stringstream@0.0.6 — direct
tough-cookie@2.2.2 — direct
tunnel-agent@0.4.3 — direct
readable-stream@2.0.6 — indirect
delayed-stream@1.0.0 — indirect
async@2.6.4 — indirect
chalk@1.1.3 — indirect
commander@2.20.3 — indirect
is-my-json-valid@2.20.6 — indirect
pinkie-promise@2.0.1 — indirect
boom@2.10.1 — indirect
cryptiles@2.0.5 — indirect
hoek@2.16.3 — indirect
sntp@1.0.9 — indirect
assert-plus@0.2.0 — indirect
jsprim@1.4.2 — indirect
sshpk@1.18.0 — indirect
mime-db@1.52.0 — indirect
core-util-is@1.0.3 — indirect
inherits@2.0.4 — indirect
isarray@1.0.0 — indirect
process-nextick-args@1.0.7 — indirect
string_decoder@0.10.31 — indirect
util-deprecate@1.0.2 — indirect
lodash@4.18.1 — indirect
ansi-styles@2.2.1 — indirect
escape-string-regexp@1.0.5 — indirect
has-ansi@2.0.0 — indirect
strip-ansi@3.0.1 — indirect
supports-color@2.0.0 — indirect
generate-function@2.3.1 — indirect
generate-object-property@1.2.0 — indirect
is-my-ip-valid@1.0.1 — indirect
jsonpointer@5.0.1 — indirect
xtend@4.0.2 — indirect
pinkie@2.0.4 — indirect
assert-plus@1.0.0 — indirect
extsprintf@1.3.0 — indirect
json-schema@0.4.0 — indirect
verror@1.10.0 — indirect
asn1@0.2.6 — indirect
assert-plus@1.0.0 — indirect
bcrypt-pbkdf@1.0.2 — indirect
dashdash@1.14.1 — indirect
ecc-jsbn@0.1.2 — indirect
getpass@0.1.7 — indirect
jsbn@0.1.1 — indirect
safer-buffer@2.1.2 — indirect
tweetnacl@0.14.5 — indirect
ansi-regex@2.1.1 — indirect
is-property@1.0.2 — indirect
assert-plus@1.0.0 — indirect
core-util-is@1.0.2 — indirect
assert-plus@1.0.0 — indirect
assert-plus@1.0.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-p8p7-x288-28g6

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	6/10 — Found 19/28 approved changesets -- score normalized to 6
Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Binary-Artifacts	10/10 — no binaries found in the repo
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Security-Policy	0/10 — security policy file not detected
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/request/2.73.0 — retrieved 2026-10-29T15:27:07.402Z
https://api.deps.dev/v3/projects/github.com%2Frequest%2Frequest — retrieved 2026-10-29T12:00:11.350Z
https://api.deps.dev/v3/systems/npm/packages/request/versions/2.73.0 — retrieved 2026-10-29T15:27:07.942Z
https://api.deps.dev/v3/systems/npm/packages/request/versions/2.73.0:dependencies — retrieved 2026-10-29T15:27:07.948Z