GoogleCloudPlatform / GoogleCloudPlatform/cloud-sql-nodejs-connector

Dependency `gaxios` was archived - migration needed/advised

オープン
#520 コメント 0 件 リアクション 3 件 担当者 1 名 @hessjcg が担当を希望しています GitHub で見る
type: bug
主要言語
TypeScript
スター
97
フォーク
16
平均マージ
4日 16時間
マージ済み PR(30日)
4

説明

## Foreword

I wasn't entirely certain which category this falls under - realistically it's not a _bug_ and it's not a pressing security issue, but it's not really a feature request either. It's more of a flag/warning; so feel free to recategorise.

## Description

### What happened?

The `gaxios` package, which this project directly depends on (`gaxios@^7.1.3`), was [archived by its owner on January 3, 2026](https://github.com/googleapis/gaxios). The repository is now read-only and will no longer receive updates, bug fixes, or security patches.

### Why does this matter?

1. **Security risk**: Archived dependencies won't receive security updates
2. **Deprecation warnings**: The gaxios dependency chain includes deprecated packages:
- `gaxios` → `node-fetch` → `fetch-blob` → `node-domexception`
- `node-domexception` is deprecated (Node.js 18+ has native `DOMException`)
- Node.js 18 itself is [no longer in active support (even from a security perspective)](https://endoflife.date/nodejs)
3. **Ecosystem health**: Both `node-fetch` (last release Nov 2023) and `fetch-blob` (last release May 2023) appear to be unmaintained

### Current dependency chain

```
@google-cloud/cloud-sql-connector
└── gaxios@^7.1.3 (ARCHIVED)
└── node-fetch@^3.3.2 (stale)
└── fetch-blob (abandoned)
└── node-domexception (deprecated)
```

### Suggested migration path

Node.js 18+ includes native `fetch` support. Migrating to native fetch would:
- Remove the dependency on the archived `gaxios` package
- Eliminate the entire deprecated dependency chain
- Reduce bundle size
- Improve long-term maintainability

### Environment

- `@google-cloud/cloud-sql-connector` version: 1.8.4 (latest at time of writing)
- Node.js: 20.x / 22.x

### Additional context

This was discovered while investigating npm deprecation warnings in a project using `firebase-tools`, which depends on `@google-cloud/cloud-sql-connector`.

The deprecation warning during `npm install`:
```
npm warn deprecated node-domexception@1.0.0: Use your platform's native DOMException instead
```

There is an [open issue in `firebase-tools` that provides a more thorough dependency tree](https://github.com/firebase/firebase-tools/issues/9421)

コントリビューションガイド

コントリビューションガイドを開く

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。