awslabs / awslabs/aws-crt-nodejs
Replace axios with built-in alternatives
- Dominant language
- TypeScript
- Stars
- 43
- Forks
- 32
- Avg merge
- 1d 17h
- Merged PRs (30d)
- 1
Description
### Describe the feature
Can use of axios be replaced by native node:http(s), fetch, or XMLHttpRequest?
### Use Case
Because this package (aws-crt) is a dependency of the AWS SDK for JavaScript (v3), SDK users are affected by recurrent vulnerabilities discovered in the axios package.
https://security.snyk.io/package/npm/axios
Although it is ranged `^1.x`, applications may not update with as much frequency as would be required.
Secondarily, it would also reduce the package size to remove this dependency.
### Proposed Solution
_No response_
### Other Information
_No response_
### Acknowledgements
- [x] I may be able to implement this feature request
- [ ] This feature might incur a breaking change
Contributor guide
Research direction
The issue does not name any files, tests, or entry points. Start by locating the axios dependency and every usage in the repository, then trace the related request paths and tests. Done means axios is no longer required while the existing behavior remains covered by the relevant test suite.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- node.js, typescript
- Domain
- backend, networking
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 45/100