request is a dependency, not a devDependency