remove the request lib dependency

.github/workflows/unitTests.yml

@@ -13,15 +13,14 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [11.x, 12.x, 13.x, 14.x, 15.x, 16.x, 18.x, 20.x]
+        node-version: [11.x, 12.x, 13.x, 14.x, 15.x, 16.x, 18.x, 20.x, 22.x, 24.x, 25.x]
 
     steps:
       - uses: actions/checkout@v2
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v2
         with:
           node-version: ${{ matrix.node-version }}
-      - run: npm install request
       - run: npm install
       - run: npm test
 
@@ -37,7 +36,6 @@ jobs:
           uses: actions/setup-node@v2
           with:
             node-version: ${{ matrix.node-version }}
-        - run: npm install request
         - run: npm install
         - run: npm test
         - name: Upload coverage to Codecov

CHANGELOG.md

@@ -1,4 +1,8 @@
 # Change Log
+## [v4.75.3](https://github.com/plivo/plivo-node/tree/v4.75.3) (2025-11-25)
+**Vulnerabilities Fix**
+- removed dependency on request
+- 
 ## [v4.75.2](https://github.com/plivo/plivo-node/tree/v4.75.2) (2025-10-15)
 **Feature - Compliance application rejection reason**
 - Added `rejectionReason` to compliance application responses (get, create)

Makefile

@@ -13,8 +13,8 @@ start:
 
 test:
 	@[ "${CONTAINER}" ] && \
-		(docker exec -it $$CONTAINER /bin/bash -c "npm install request --no-save && npm test") || \
-		(npm install request --no-save && npm test)
+		(docker exec -it $$CONTAINER /bin/bash -c "npm test") || \
+		(npm test)
 
 run:
 	@[ "${CONTAINER}" ] && \

gulpfile.js

@@ -12,7 +12,18 @@ var isparta = require('isparta');
 const merge = require("merge-stream");
 // Initialize the babel transpiler so ES2015 files gets compiled
 // when they're loaded
-require('babel-register');
+require('babel-register')({
+  ignore: function(filePath) {
+    // Ignore all node_modules (including axios) - they're already transpiled or CommonJS
+    // axios is CommonJS and doesn't need transpilation
+    if (filePath.includes('node_modules')) {
+      return true;
+    }
+    return false;
+  },
+  presets: ['es2015', 'flow'],
+  extensions: ['.js', '.jsx', '.es6', '.es']
+});
 
 gulp.task('static', function () {
   return gulp.src(['lib/**/*.js', '!lib/rest/request-test.js', '!lib/rest/client-test.js'])
@@ -35,7 +46,9 @@ gulp.task('pre-test', function () {
     .pipe(excludeGitignore())
     .pipe(istanbul({
       includeUntested: false,
-      instrumenter: isparta.Instrumenter
+      instrumenter: isparta.Instrumenter,
+      // Exclude node_modules (including axios) from instrumentation
+      ignore: ['**/node_modules/**']
     }))
     .pipe(istanbul.hookRequire());
 });

lib/rest/axios.js

@@ -1,7 +1,11 @@
 import * as Exceptions from '../utils/exceptions';
 import * as _ from "lodash";
 
-import axios from 'axios';
+// Use require() for axios CommonJS build to ensure compatibility with Node.js v11+
+// axios v1.x's main entry (index.js) uses ES modules which Node.js v11 doesn't support
+// We need to use the CommonJS build directly: axios/dist/node/axios.cjs
+// This file is pre-compiled CommonJS and works on all Node.js versions
+const axios = require('axios/dist/node/axios.cjs');
 import queryString from 'querystring';
 import http from 'http';
 import https from 'https';

lib/rest/request-test.js

@@ -1,5 +1,4 @@
 import queryString from 'querystring';
-import request from 'request';
 
 export function Request(config) {
   let auth = 'Basic ' + new Buffer(config.authId + ':' + config.authToken)

package.json

@@ -1,6 +1,6 @@
 {
   "name": "plivo",
-  "version": "4.75.2",
+  "version": "4.75.3",
   "description": "A Node.js SDK to make voice calls and send SMS using Plivo and to generate Plivo XML",
   "homepage": "https://github.com/plivo/plivo-node",
   "files": [
@@ -67,7 +67,6 @@
     "jsonwebtoken": "^9.0.0",
     "lodash": "^4.17.4",
     "querystring": "^0.2.0",
-    "request": "^2.88.2",
     "uri-parser": "^1.0.0",
     "utf8": "^2.1.2",
     "xml2js": "^0.5.0",