Upgrade to request@2.44.0.  Current version has a vulnerability in qs (https://nodesecurity.io/advisories/qs_dos_extended_event_loop_blocking)