request 2.80.0

Simplified HTTP request client.

request@2.80.0 was published on 2017-03-04. Its manifest declares 21 runtime dependencies and 0 peer requirements. Bundled type declarations are not declared in the inspected metadata. The declared Node.js requirement is >= 4.

Deprecated: request has been deprecated, see https://github.com/request/request/issues/3142

All request versions · Permanent reference to 2.80.0 · Latest release

Package specifications

Version	2.80.0
License declaration	Apache-2.0
Published	2017-03-04T04:42:42.782Z
Node.js requirement	>= 4
Type declarations	Not declared
Runtime dependency count	21
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	index.js
Side effects declaration	Not declared
Direct advisories	1
Resolved graph dependencies	76
Repository stars	25486
Repository forks	3136

Install request 2.80.0

npm install request@2.80.0
pnpm add request@2.80.0
yarn add request@2.80.0

Runtime dependencies

qs ~6.3.0
aws4 ^1.2.1
hawk ~3.1.3
uuid ^3.0.0
extend ~3.0.0
caseless ~0.12.0
isstream ~0.1.2
aws-sign2 ~0.6.0
form-data ~2.1.1
mime-types ~2.1.7
oauth-sign ~0.8.1
stringstream ~0.0.4
tough-cookie ~2.3.0
tunnel-agent ~0.4.1
forever-agent ~0.6.1
har-validator ~4.2.0
is-typedarray ~1.0.0
http-signature ~1.1.0
combined-stream ~1.0.5
performance-now ^0.2.0
json-stringify-safe ~5.0.1

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

aws-sign2@0.6.0 — direct
aws4@1.13.2 — direct
caseless@0.12.0 — direct
combined-stream@1.0.8 — direct
extend@3.0.2 — direct
forever-agent@0.6.1 — direct
form-data@2.1.4 — direct
har-validator@4.2.1 — direct
hawk@3.1.3 — direct
http-signature@1.1.1 — direct
is-typedarray@1.0.0 — direct
isstream@0.1.2 — direct
json-stringify-safe@5.0.1 — direct
mime-types@2.1.35 — direct
oauth-sign@0.8.2 — direct
performance-now@0.2.0 — direct
qs@6.3.5 — direct
stringstream@0.0.6 — direct
tough-cookie@2.3.4 — direct
tunnel-agent@0.4.3 — direct
uuid@3.4.0 — direct
delayed-stream@1.0.0 — indirect
asynckit@0.4.0 — indirect
ajv@4.11.8 — indirect
har-schema@1.0.5 — indirect
boom@2.10.1 — indirect
cryptiles@2.0.5 — indirect
hoek@2.16.3 — indirect
sntp@1.0.9 — indirect
assert-plus@0.2.0 — indirect
jsprim@1.4.2 — indirect
sshpk@1.18.0 — indirect
mime-db@1.52.0 — indirect
punycode@1.4.1 — indirect
co@4.6.0 — indirect
json-stable-stringify@1.3.0 — indirect
assert-plus@1.0.0 — indirect
extsprintf@1.3.0 — indirect
json-schema@0.4.0 — indirect
verror@1.10.0 — indirect
asn1@0.2.6 — indirect
assert-plus@1.0.0 — indirect
bcrypt-pbkdf@1.0.2 — indirect
dashdash@1.14.1 — indirect
ecc-jsbn@0.1.2 — indirect
getpass@0.1.7 — indirect
jsbn@0.1.1 — indirect
safer-buffer@2.1.2 — indirect
tweetnacl@0.14.5 — indirect
call-bind@1.0.9 — indirect
call-bound@1.0.4 — indirect
isarray@2.0.5 — indirect
jsonify@0.0.1 — indirect
object-keys@1.1.1 — indirect
assert-plus@1.0.0 — indirect
core-util-is@1.0.2 — indirect
assert-plus@1.0.0 — indirect
assert-plus@1.0.0 — indirect
call-bind-apply-helpers@1.0.2 — indirect
es-define-property@1.0.1 — indirect
get-intrinsic@1.3.1 — indirect
set-function-length@1.2.2 — indirect
es-errors@1.3.0 — indirect
function-bind@1.1.2 — indirect
async-function@1.0.0 — indirect
async-generator-function@1.0.0 — indirect
es-object-atoms@1.1.2 — indirect
generator-function@2.0.1 — indirect
get-proto@1.0.1 — indirect
gopd@1.2.0 — indirect
has-symbols@1.1.0 — indirect
hasown@2.0.4 — indirect
math-intrinsics@1.1.0 — indirect
define-data-property@1.1.4 — indirect
has-property-descriptors@1.0.2 — indirect
dunder-proto@1.0.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

Known direct advisories

GHSA-p8p7-x288-28g6

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	6/10 — Found 19/28 approved changesets -- score normalized to 6
Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Binary-Artifacts	10/10 — no binaries found in the repo
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Security-Policy	0/10 — security policy file not detected
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/request/2.80.0 — retrieved 2026-10-29T11:43:16.379Z
https://api.deps.dev/v3/projects/github.com%2Frequest%2Frequest — retrieved 2026-10-29T05:58:36.377Z
https://api.deps.dev/v3/systems/npm/packages/request/versions/2.80.0 — retrieved 2026-10-29T11:43:16.943Z
https://api.deps.dev/v3/systems/npm/packages/request/versions/2.80.0:dependencies — retrieved 2026-10-29T11:43:16.978Z