Update dependency to fix vulnerability

[idris-maps]

Client version

4.3.0

Expected behaviour

No vulnerabilities

Actual behaviour

Steps to reproduce

npm install

[demoore]

Thanks for reporting this @idris-maps. We'll update this as soon as this has been merged into the HTTP client this package uses: danwrong/restler#263

[vuhrmeister]

Are you confident that it will? The last commit is from 2015 and there are a lot of outstanding Pull Requests.

[idris-maps]

It seems to be a library to do HTTP requests. Maybe it makes sense to use something that is actively maintained. Maybe axios

[demoore]

Yeah, that's a good point. I don't think we're able to rewrite the client with a different dependency soon. I wonder if we can vendor restler and and update the package the vulnerability?

[tday]

Any updates on this? Seems just a few steps away given you've forked and patched

[demoore]

Thank you for your patience, folks. We've released a new version with a patched version of restler.

[tday]

Thanks so much for the patch! @demoore 👏