GoogleCloudPlatform / GoogleCloudPlatform/cloud-sql-nodejs-connector

Dependency `gaxios` was archived - migration needed/advised

Abierto
#520 0 comentarios 3 reacciones 1 asignado Reclamado por @hessjcg Ver en GitHub
type: bug
Lenguaje dominante
TypeScript
Estrellas
97
Forks
16
Merge medio
4 d 16 h
PR fusionados (30 d)
4

Descripción

## Foreword

I wasn't entirely certain which category this falls under - realistically it's not a _bug_ and it's not a pressing security issue, but it's not really a feature request either. It's more of a flag/warning; so feel free to recategorise.

## Description

### What happened?

The `gaxios` package, which this project directly depends on (`gaxios@^7.1.3`), was [archived by its owner on January 3, 2026](https://github.com/googleapis/gaxios). The repository is now read-only and will no longer receive updates, bug fixes, or security patches.

### Why does this matter?

1. **Security risk**: Archived dependencies won't receive security updates
2. **Deprecation warnings**: The gaxios dependency chain includes deprecated packages:
- `gaxios` → `node-fetch` → `fetch-blob` → `node-domexception`
- `node-domexception` is deprecated (Node.js 18+ has native `DOMException`)
- Node.js 18 itself is [no longer in active support (even from a security perspective)](https://endoflife.date/nodejs)
3. **Ecosystem health**: Both `node-fetch` (last release Nov 2023) and `fetch-blob` (last release May 2023) appear to be unmaintained

### Current dependency chain

```
@google-cloud/cloud-sql-connector
└── gaxios@^7.1.3 (ARCHIVED)
└── node-fetch@^3.3.2 (stale)
└── fetch-blob (abandoned)
└── node-domexception (deprecated)
```

### Suggested migration path

Node.js 18+ includes native `fetch` support. Migrating to native fetch would:
- Remove the dependency on the archived `gaxios` package
- Eliminate the entire deprecated dependency chain
- Reduce bundle size
- Improve long-term maintainability

### Environment

- `@google-cloud/cloud-sql-connector` version: 1.8.4 (latest at time of writing)
- Node.js: 20.x / 22.x

### Additional context

This was discovered while investigating npm deprecation warnings in a project using `firebase-tools`, which depends on `@google-cloud/cloud-sql-connector`.

The deprecation warning during `npm install`:
```
npm warn deprecated node-domexception@1.0.0: Use your platform's native DOMException instead
```

There is an [open issue in `firebase-tools` that provides a more thorough dependency tree](https://github.com/firebase/firebase-tools/issues/9421)

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.