awslabs / awslabs/aws-crt-nodejs

Replace axios with built-in alternatives

Open
#607 7 comments 2 reactions 0 assignees View on GitHub
feature-request needs-triage
Dominant language
TypeScript
Stars
43
Forks
32
Avg merge
1d 17h
Merged PRs (30d)
1

Description

### Describe the feature

Can use of axios be replaced by native node:http(s), fetch, or XMLHttpRequest?

### Use Case

Because this package (aws-crt) is a dependency of the AWS SDK for JavaScript (v3), SDK users are affected by recurrent vulnerabilities discovered in the axios package.

https://security.snyk.io/package/npm/axios

Although it is ranged `^1.x`, applications may not update with as much frequency as would be required.

Secondarily, it would also reduce the package size to remove this dependency.

### Proposed Solution

_No response_

### Other Information

_No response_

### Acknowledgements

- [x] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

Contributor guide

Open the contributing guide

Research direction

The issue does not name any files, tests, or entry points. Start by locating the axios dependency and every usage in the repository, then trace the related request paths and tests. Done means axios is no longer required while the existing behavior remains covered by the relevant test suite.

Written by the indexing model from the issue text.

Assessment

Tech stack
node.js, typescript
Domain
backend, networking
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.